Simatic S7 Plcsim Advanced Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-46156 Dec 12, 12:15 HIGH This Week

Affected devices improperly handle specially crafted packets sent to port 102/tcp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free Memory Corruption Siemens Simatic S7 1500 Et 200Pro +72

NVD

CVSS 3.1

7.5

EPSS

1.2%

CVE-2023-28831 Sep 12, 10:15 HIGH This Week

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Integer Overflow Siemens Simatic S7 1200 Cpu Firmware Simatic S7 1500 Software Controller Firmware +76

NVD

CVSS 4.0

8.7

EPSS

0.8%

CVE-2022-38465 Oct 11, 11:15 HIGH This Week

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Siemens Simatic S7 1500 Software Controller Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc Firmware Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc2 Firmware +42

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-46156

EPSS 1% CVSS 7.5

HIGH This Week

Denial Of Service Use After Free Memory Corruption +74

NVD

CVE-2023-28831

EPSS 1% CVSS 8.7

HIGH This Week

Denial Of Service Integer Overflow Siemens +78

NVD

CVE-2022-38465

EPSS 0% CVSS 7.8

HIGH This Week

Information Disclosure Siemens Simatic S7 1500 Software Controller +44

NVD