SI
Product
Simatic Ipc477e Firmware
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 12Low 0
Watch
Add Simatic Ipc477e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8745 | 6.8 | Nov 12 | Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE… Affected: before 21.01.15 |
| CVE-2021-42059 | 6.7 | Feb 3 | An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before… Affected: All versions, or not specified |
| CVE-2020-27339 | 6.7 | Jun 16 | In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware… Affected: All versions, or not specified |
| CVE-2020-8703 | 6.7 | Jun 9 | Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a… Affected: All versions, or not specified |
| CVE-2020-12357 | 6.7 | Jun 9 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2018-3657 | 6.7 | Sep 12 | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT… Affected: before 21.01.09 |
| CVE-2020-8704 | 6.4 | Jun 9 | Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2020-8670 | 6.4 | Jun 9 | Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2018-3616 | 5.9 | Sep 12 | Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain… Affected: before 21.01.09 |
| CVE-2020-8698 | 5.5 | Nov 12 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: before 21.01.15 |
| CVE-2018-3658 | 5.3 | Sep 12 | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial… Affected: before 21.01.09 |
| CVE-2020-24507 | 4.4 | Jun 9 | Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may… Affected: All versions, or not specified |
Showing 12