Wincc Open Architecture

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-0160 Apr 07, 22:55 HIGH POC KEV PATCH THREAT Act Now

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure OpenSSL Broadcom Debian +33

NVD Exploit-DB GitHub VulDB

CVSS 3.1

7.5

EPSS

94.5%

Threat

7.3

CVE-2022-33139 Jun 21, 13:15 CRITICAL Act Now

A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Wincc Open Architecture Desigo Cc Cerberus Dms +1

NVD

CVSS 3.1

9.8

EPSS

1.2%

CVE-2014-0160

EPSS 94% 7.3 CVSS 7.5

HIGH POC KEV PATCH THREAT Act Now

Buffer Overflow Information Disclosure OpenSSL +35

NVD Exploit-DB GitHub VulDB

CVE-2022-33139

EPSS 1% CVSS 9.8

CRITICAL Act Now

Information Disclosure Siemens Wincc Open Architecture +3

NVD