SS
Product
Simatic S7-1500 Cpu Firmware
14
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Simatic S7-1500 Cpu Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25622 | 7.5 | Apr 12 | The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than… Affected: before 2.0.0 |
| CVE-2019-10936 | 7.5 | Oct 10 | Affected devices improperly handle large amounts of specially crafted UDP packets Affected: before 2.0 |
| CVE-2016-2200 | 7.5 | Feb 8 | Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102 Affected: through 1.8.2 |
| CVE-2016-2201 | 5.3 | Feb 8 | Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102 Affected: 1.8.2 |
| CVE-2014-5074 | – | Aug 17 | Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets Affected: through 1.5.1; 1.0.1; 1.1.0; 1.1.1; 1.1.2; 1.5 |
| CVE-2014-2259 | – | Mar 16 | Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2257 | – | Mar 16 | Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2255 | – | Mar 16 | Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2253 | – | Mar 16 | Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2251 | – | Mar 16 | The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to… Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2249 | – | Mar 16 | Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0… Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2248 | – | Mar 16 | Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to… Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2247 | – | Mar 16 | The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
| CVE-2014-2246 | – | Mar 16 | Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject… Affected: through 1.1.2; 1.0.1; 1.1.0; 1.1.1 |
Showing 14
