Simatic S7 400 Pn Dp V7 Firmware

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-30694 MEDIUM PATCH This Month

The login endpoint /FormLogin in affected web services does not apply proper origin checking. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Simatic S7 1500 Software Controller Simatic S7 Plcsim Advanced Simatic Wincc Runtime 6Es7154 8Fb01 0Ab0 Firmware +109

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2022-25622 HIGH This Week

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Simatic Cfu Diq Firmware Simatic Cfu Pa Firmware Simatic S7 300 Cpu Firmware Simatic S7 400H V6 Firmware +8

NVD

CVSS 3.1

7.5

EPSS

0.8%

CVE-2018-16557 HIGH This Week

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Jwt Attack Simatic S7 400 Firmware Simatic S7 400 Pn Dp V7 Firmware Simatic S7 400H Firmware +1

NVD

CVSS 3.1

8.2

EPSS

0.8%

CVE-2018-16556 HIGH This Week

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Simatic S7 400 Firmware Simatic S7 400 Pn Dp V7 Firmware Simatic S7 400H Firmware Simatic S7 410 Firmware +1

NVD

CVSS 3.1

7.5

EPSS

1.5%

CVE-2018-4843 MEDIUM This Month

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Denial Of Service Simatic Cp 343 1 Firmware Simatic Cp 443 1 Firmware Simatic S7 1500 Firmware +8

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2022-30694

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

CSRF Simatic S7 1500 Software Controller Simatic S7 Plcsim Advanced +111

NVD

CVE-2022-25622

EPSS 1% CVSS 7.5

HIGH This Week

Denial Of Service Simatic Cfu Diq Firmware Simatic Cfu Pa Firmware +10

NVD

CVE-2018-16557

EPSS 1% CVSS 8.2

HIGH This Week

Denial Of Service Jwt Attack Simatic S7 400 Firmware +3

NVD

CVE-2018-16556

EPSS 2% CVSS 7.5

HIGH This Week

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Simatic S7 400 Firmware Simatic S7 400 Pn Dp V7 Firmware +3

NVD

CVE-2018-4843

EPSS 1% CVSS 6.5

MEDIUM This Month

Microsoft Denial Of Service Simatic Cp 343 1 Firmware +10

NVD