Skip to main content

Sinamics Sm150I Firmware

7 CVEs product

Monthly

CVE-2021-31337 Jun 28, 13:15 CRITICAL Act Now

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens Sinamics Sl150 Firmware Sinamics Sm150 Firmware Sinamics Sm150I Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-27388 Jun 15, 20:15 CRITICAL Act Now

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Sinamics Sl150 Firmware Sinamics Sm150 Firmware Sinamics Sm150I Firmware
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2021-27386 May 12, 14:15 HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Sinamics Gh150 Firmware Sinamics Gl150 Firmware Sinamics Gm150 Firmware +15
NVD VulDB
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-27385 May 12, 14:15 HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Sinamics Gh150 Firmware Sinamics Gl150 Firmware Sinamics Gm150 Firmware +15
NVD VulDB
CVSS 3.1
7.5
EPSS
0.5%
CVE-2021-27384 May 12, 14:15 CRITICAL PATCH Act Now

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Siemens Sinamics Gh150 Firmware Sinamics Gl150 Firmware Sinamics Gm150 Firmware +15
NVD VulDB
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-27383 May 12, 14:15 HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Sinamics Gh150 Firmware Sinamics Gl150 Firmware Sinamics Gm150 Firmware +15
NVD VulDB
CVSS 3.1
7.5
EPSS
0.6%
CVE-2020-15798 Feb 09, 17:15 CRITICAL PATCH Act Now

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Siemens Sinamics Gh150 Firmware Sinamics Gl150 Firmware Sinamics Gm150 Firmware +7
NVD VulDB
CVSS 3.1
9.8
EPSS
1.7%
EPSS 2% CVSS 9.8
CRITICAL Act Now

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens Sinamics Sl150 Firmware +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Sinamics Sl150 Firmware +2
NVD
EPSS 1% CVSS 7.5
HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Sinamics Gh150 Firmware +17
NVD VulDB
EPSS 1% CVSS 7.5
HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Sinamics Gh150 Firmware +17
NVD VulDB
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Siemens Sinamics Gh150 Firmware +17
NVD VulDB
EPSS 1% CVSS 7.5
HIGH This Week

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Sinamics Gh150 Firmware +17
NVD VulDB
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Siemens Sinamics Gh150 Firmware +9
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy