ByteOS Network

Vulnerability Details :

CVE-2016-9158

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-17 Dec, 2016 | 03:34

Updated At-06 Aug, 2024 | 02:42

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:siemens

Assigner Org ID:cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At:17 Dec, 2016 | 03:34

Updated At:06 Aug, 2024 | 02:42

▼CVE Numbering Authority (CNA)

All versions

Problem Types

Type	CWE ID	Description
CWE	CWE-20	CWE-20: Improper Input Validation

Type: CWE

CWE ID: CWE-20

Description: CWE-20: Improper Input Validation

References

Hyperlink	Resource
http://www.securityfocus.com/bid/94820	vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1037434	vdb-entry x_refsource_SECTRACK
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05	x_refsource_MISC
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf	x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/94820

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.securitytracker.com/id/1037434

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05

Resource:

x_refsource_MISC

Hyperlink: https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/94820	vdb-entry x_refsource_BID x_transferred
http://www.securitytracker.com/id/1037434	vdb-entry x_refsource_SECTRACK x_transferred
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05	x_refsource_MISC x_transferred
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf	x_refsource_CONFIRM x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf	x_refsource_MISC x_transferred

Hyperlink: http://www.securityfocus.com/bid/94820

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.securitytracker.com/id/1037434

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:productcert@siemens.com

Published At:17 Dec, 2016 | 03:59

Updated At:12 Apr, 2025 | 10:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 7.8

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Siemens AG

>>simatic_s7-300_cpu_firmware>>-

cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_312>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_312:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_314>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_315-2_dp>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_315-2_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_317-_2_dp>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_317-_2_dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_317-2_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_317-2_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-300_cpu_319-3_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-300_cpu_319-3_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_firmware>>-

cpe:2.3:o:siemens:simatic_s7-400_cpu_firmware:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_412-1>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-1:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_412-2>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-2:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_412-2_pn>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-2_pn:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_414-2>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-2:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_414-3>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_414-3_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_416-2>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-2:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_416-3>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_416-3_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_416f-2>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_416f-2:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_416f-3_pn\/dp>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_416f-3_pn\/dp:-:*:*:*:*:*:*:*

Siemens AG

>>simatic_s7-400_cpu_417-4>>-

cpe:2.3:h:siemens:simatic_s7-400_cpu_417-4:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Secondary	productcert@siemens.com
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Secondary

Source: productcert@siemens.com

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/94820	productcert@siemens.com	N/A
http://www.securitytracker.com/id/1037434	productcert@siemens.com	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf	productcert@siemens.com	N/A
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05	productcert@siemens.com	N/A
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf	productcert@siemens.com	N/A
http://www.securityfocus.com/bid/94820	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1037434	af854a3a-2127-422b-91ae-364da2661108	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/bid/94820

Source: productcert@siemens.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1037434

Source: productcert@siemens.com

Resource: N/A

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf

Source: productcert@siemens.com

Resource: N/A

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05

Source: productcert@siemens.com

Resource: N/A

Hyperlink: https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf

Source: productcert@siemens.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/94820

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1037434

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

963Records found

CVE-2019-18336

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.23%

7 Day CHG~0.00%

Published-10 Mar, 2020 | 19:16

Updated-05 Aug, 2024 | 01:54

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13946

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.55% / 67.02%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Vendor-Siemens AG

Product-simatic_et200al_im_157-1_pn_firmware simatic_rf182c scalance_xr526 simatic_et200m_im153-4_pn_io_hf_firmware scalance_xr552_firmware simatic_et200mp_im155-5_pn_st_firmware scalance_xr552 simatic_cp_1616 ruggedcom_rm1224_firmware simatic_cp_1604 simatic_et200sp_im155-6_pn_hf dk_standard_ethernet_controller scalance_xr-300wg scalance_xp-200 simatic_et200mp_im155-5_pn_hf_firmware scalance_xf-200ba simatic_ipc_support scalance_x-400_firmware scalance_x-300 scalance_x-200irt simatic_cp_443-1 simatic_cp_343-1_erpc scalance_xf-200_firmware scalance_xf-200 simatic_et200sp_im155-6_pn_basic simatic_et200sp_im155-6_pn_hf_firmware scalance_s615_firmware simatic_cp_1616_firmware scalance_xr524_firmware scalance_w700_ieee_802.11n_firmware scalance_m-800_firmware simatic_et200m_im153-4_pn_io_st_firmware simatic_cp_443-1_advanced_firmware scalance_xc-200_firmware profinet_driver simatic_cp_343-1 simatic_et200al_im_157-1_pn im_154-3_pn_hf simatic_cp_343-1_lean_firmware simatic_mv420_firmware scalance_xr-300wg_firmware simatic_mv420 im_154-4_pn_hf simatic_et200ecopn scalance_x-200irt_firmware simatic_et200s_firmware scalance_xr526_firmware scalance_x-300_firmware ek-ertec_200 scalance_xr524 simatic_rf600 simatic_cp_443-1_opc_ua ek-ertec_200_firmware sinamics_dcp_firmware simatic_cp_443-1_advanced simatic_mv440 simatic_cp_343-1_firmware scalance_xm-400 simatic_et200pro_firmware simatic_cp_343-1_lean scalance_xf-200ba_firmware simatic_et200ecopn_firmware ek-ertec_200p_firmware scalance_xr528_firmware scalance_xr528 simatic_rf180c simatic_mv440_firmware ruggedcom_rm1224 scalance_x-400 simatic_cp_1604_firmware scalance_s615 im_154-4_pn_hf_firmware simatic_cp_343-1_advanced_firmware simatic_cp_443-1_opc_ua_firmware simatic_rf600_firmware scalance_w700_ieee_802.11n simatic_pn\/pn_coupler_firmware simatic_et200m_im153-4_pn_io_st ek-ertec_200p sinamics_dcp simatic_et200s simatic_rf182c_firmware scalance_xp-200_firmware simatic_et200sp_im155-6_pn_basic_firmware simatic_et200mp_im155-5_pn_st simatic_cp_443-1_firmware scalance_xb-200 simatic_et200sp_im155-6_pn_st_firmware im_154-3_pn_hf_firmware scalance_xm-400_firmware simatic_cp_343-1_erpc_firmware simatic_et200pro scalance_xb-200_firmware simatic_pn\/pn_coupler simatic_et200sp_im155-6_pn_st simatic_et200mp_im155-5_pn_hf scalance_xc-200 simatic_rf180c_firmware simatic_cp_343-1_advanced scalance_m-800 simatic_et200m_im153-4_pn_io_hf SCALANCE XF208 SIMOTION D SCALANCE XR324-4M EEC (24V, ports on front)SCALANCE X204IRT SCALANCE X307-2 EEC (2x 24V, coated)SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)SIMOTION P SCALANCE XB-200 family SCALANCE X204-2TS SCALANCE X307-3 SCALANCE XR324-12M (24V, ports on rear)SCALANCE X308-2 SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL SCALANCE X307-2 EEC (230V, coated)SIMATIC RF180C SIMATIC MV440 HR SIPLUS NET SCALANCE X308-2 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN: IO-Link Master SCALANCE X202-2P IRT SCALANCE XR324-4M PoE (230V, ports on rear)SCALANCE X302-7 EEC (230V)SIMATIC CP 443-1 SOFTNET-IE PNIO SCALANCE S615 LAN-Router SCALANCE X206-1LD SIMATIC CP 343-1 Advanced SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL SCALANCE W-700 IEEE 802.11n family SIPLUS ET 200SP IM 155-6 PN ST TX RAIL SIMATIC MV420 SR-B SCALANCE XR-500 family SINAMICS DCP SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 SCALANCE XF204IRT SCALANCE X307-2 EEC (2x 230V)SIMATIC ET 200MP IM 155-5 PN ST SCALANCE M826-2 SHDSL-Router SCALANCE XF-200BA SCALANCE X204IRT PRO SIMATIC MV420 SR-P SCALANCE XP-200 SIMATIC RF182C SIPLUS NET CP 443-1 SIMOTION C SCALANCE X201-3P IRT SCALANCE M804PB SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P SIPLUS ET 200SP IM 155-6 PN ST BA SIMATIC ET 200pro IM 154-3 PN HF SCALANCE X206-1 SCALANCE XF204 SIMATIC MV420 SR-B Body Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 SIMATIC IPC Support, Package for VxWorks SCALANCE X308-2LH SCALANCE XF204-2 SCALANCE XR324-4M EEC (24V, ports on rear)SCALANCE XR324-4M PoE (24V, ports on front)SCALANCE XM-400 family SCALANCE X302-7 EEC (2x 230V)SCALANCE X408-2 SCALANCE XF201-3P IRT SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL SIMATIC MV420 SR-P Body SCALANCE M816-1 ADSL-Router SIMATIC MV440 SR SCALANCE M812-1 ADSL-Router SCALANCE X307-2 EEC (2x 24V)SCALANCE X212-2 SCALANCE X306-1LD FE SCALANCE X308-2M TS SCALANCE M876-3 SIMATIC ET 200AL IM 157-1 PN SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 SIPLUS ET 200MP IM 155-5 PN ST TX RAIL SCALANCE X201-3P IRT PRO SCALANCE X302-7 EEC (2x 230V, coated)SCALANCE X320-1-2LD FE SCALANCE XR324-4M PoE TS (24V, ports on front)SCALANCE XR324-12M TS (24V)SCALANCE XR324-12M (230V, ports on rear)SCALANCE XF204-2BA IRT SCALANCE X204-2FM SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 SIMATIC CP 443-1 OPC UA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN, 4AO U/I 4xM12 SCALANCE X204-2LD TS SIMATIC ET 200SP IM 155-6 PN HF SCALANCE X302-7 EEC (24V, coated)SIMATIC CP 443-1 Advanced SCALANCE XR-300WG family SCALANCE X224 SIMATIC ET 200SP IM 155-6 PN ST SIPLUS ET 200SP IM 155-6 PN HF PROFINET Driver for Controller SIMATIC RF600R family SCALANCE M876-4 (NAM)SCALANCE M874-3 SCALANCE X308-2LD SCALANCE X307-2 EEC (24V)SIMATIC ET 200SP IM 155-6 PN BA SCALANCE X208 SCALANCE M876-3 (ROK)SCALANCE X304-2FE SCALANCE X307-2 EEC (230V)SIPLUS NET CP 343-1 Lean SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)SIMATIC ET 200SP IM 155-6 PN ST BA SCALANCE X302-7 EEC (2x 24V)SIMATIC ET 200MP IM 155-5 PN HF RUGGEDCOM RM1224 family SIMATIC ET 200pro IM 154-4 PN HF SCALANCE X208PRO SIPLUS NET CP 343-1 SCALANCE X212-2LD SCALANCE X302-7 EEC (24V)SCALANCE X204-2 SCALANCE XF206-1 SIMATIC ET200S (incl. SIPLUS variants)SIMATIC CP 343-1 Lean SCALANCE XR324-4M EEC (2x 24V, ports on rear)SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)SCALANCE XR324-4M PoE (24V, ports on rear)SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 SCALANCE X204-2LD SCALANCE M876-4 (EU)SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)SCALANCE X308-2M SCALANCE X308-2M PoE SCALANCE X310FE SCALANCE X308-2LH+SIPLUS NET CP 343-1 Advanced SIMATIC CP 343-1 SCALANCE X307-3LD Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 SIPLUS NET CP 443-1 Advanced SCALANCE XF202-2P IRT SCALANCE X307-2 EEC (24V, coated)SCALANCE X307-2 EEC (2x 230V, coated)SCALANCE X302-7 EEC (2x 24V, coated)SCALANCE X202-2P IRT PRO SCALANCE X310 SCALANCE XR324-12M (24V, ports on front)SIPLUS ET 200MP IM 155-5 PN ST SCALANCE X320-1 FE SCALANCE M874-2 SCALANCE XR324-4M PoE (230V, ports on front)SIMATIC CP 343-1 ERPC SIPLUS ET 200SP IM 155-6 PN ST SIMATIC MV440 UR SCALANCE X216 SIMATIC CP 1616 and CP 1604 SCALANCE X302-7 EEC (230V, coated)SIPLUS ET 200MP IM 155-5 PN HF SCALANCE X200-4P IRT SCALANCE XC-200 SCALANCE X202-2IRT SCALANCE XR324-12M (230V, ports on front)SCALANCE XR324-4M EEC (2x 24V, ports on front)

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13926

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.69%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionality of the device.

Vendor-Siemens AG

Product-scalance_s623 scalance_s612_firmware scalance_s627-2m_firmware scalance_s602 scalance_s627-2m scalance_s602_firmware scalance_s623_firmware scalance_s612 SCALANCE S627-2M SCALANCE S623 SCALANCE S602 SCALANCE S612

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-27194

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.46%

7 Day CHG~0.00%

Published-12 Apr, 2022 | 09:07

Updated-03 Aug, 2024 | 05:25

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.

Vendor-Siemens AG

Product-simatic_pcs_neo totally_integrated_automation_portal sinetplan SIMATIC PCS neo (Administration Console)SINETPLAN TIA Portal

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-26648

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-0.87% / 74.30%

7 Day CHG~0.00%

Published-12 Jul, 2022 | 10:06

Updated-21 Apr, 2025 | 13:52

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.

Vendor-Siemens AG

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26335

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-2.87% / 85.74%

7 Day CHG~0.00%

Published-12 Apr, 2022 | 09:07

Updated-03 Aug, 2024 | 05:03

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.

Vendor-Siemens AG

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-4837

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.48% / 80.21%

7 Day CHG~0.00%

Published-25 Jan, 2018 | 14:00

Updated-16 Sep, 2024 | 16:22

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-5381

Matching Score-8

Assigner-CERT/CC

View Details

Matching Score-8

Assigner-CERT/CC

CVSS Score-6.5||MEDIUM

EPSS-10.09% / 92.79%

7 Day CHG~0.00%

Published-19 Feb, 2018 | 13:00

Updated-16 Sep, 2024 | 16:17

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.

Vendor-quagga Quagga Debian GNU/Linux Siemens AG Canonical Ltd.

Product-ubuntu_linux debian_linux quagga ruggedcom_rox_ii_firmware ruggedcom_rox_ii bgpd

CWE ID-CWE-228

Improper Handling of Syntactically Invalid Structure

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2018-16561

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.37% / 57.88%

7 Day CHG~0.00%

Published-17 Apr, 2019 | 13:38

Updated-05 Aug, 2024 | 10:24

A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an attacker to be able to send a specially crafted S7 communication packet to a communication interface of the CPU. This includes Ethernet, PROFIBUS, and Multi Point Interfaces (MPI). No user interaction or privileges are required to exploit the security vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the core functionality of the CPU, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.

Vendor-Siemens AG

Product-simatic_s7-300 simatic_s7-300fs simatic_s7-300t_firmware simatic_s7-300t simatic_s7-300fs_firmware simatic_s7-300f_firmware simatic_s7-300_firmware simatic_s7-300f SIMATIC S7-300 CPUs

CVE-2018-16557

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-0.09% / 27.02%

7 Day CHG~0.00%

Published-13 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 10:24

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Sending of specially crafted packets to port 102/tcp via Ethernet interface via PROFIBUS or Multi Point Interfaces (MPI) could cause a denial of service condition on affected devices. Flashing with a firmware image may be required to recover the CPU. Successful exploitation requires an attacker to have network access to port 102/tcp via Ethernet interface or to be able to send messages via PROFIBUS or Multi Point Interfaces (MPI) to the device. No user interaction is required. If no access protection is configured, no privileges are required to exploit the security vulnerability. The vulnerability could allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of the system.

Vendor-Siemens AG

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

CVE-2018-13815

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.45% / 62.75%

7 Day CHG~0.00%

Published-13 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 09:14

A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.

Vendor-Siemens AG

Product-simatic_s7-1200_firmware simatic_s7-1200 simatic_s7-1500_firmware simatic_s7-1500 SIMATIC S7-1200, SIMATIC S7-1500

CWE ID-CWE-410

Insufficient Resource Pool

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-13805

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.50% / 64.73%

7 Day CHG~0.00%

Published-10 Oct, 2018 | 17:00

Updated-05 Aug, 2024 | 09:14

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 incl. F (All versions >= V2.0 and < V2.5). An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to communicate over the network. This vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. An attacker could use this vulnerability to compromise availability of the network connectivity. At the time of advisory publication no public exploitation of this vulnerability was known.

Vendor-Siemens AG

Product-simatic_s7-1500f simatic_et_200sp simatic_et_200sp_firmware simatic_s7-1500_firmware simatic_s7-1500f_firmware simatic_s7-1500 SIMATIC S7-1500 incl. F SIMATIC ET 200SP Open Controller SIMATIC S7-1500 Software Controller

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-3749

Matching Score-8

Assigner-Protect AI (formerly huntr.dev)

View Details

Matching Score-8

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-7.5||HIGH

EPSS-8.37% / 91.93%

7 Day CHG-0.21%

Published-31 Aug, 2021 | 10:36

Updated-03 Aug, 2024 | 17:09

Inefficient Regular Expression Complexity in axios/axios

axios is vulnerable to Inefficient Regular Expression Complexity

Vendor-axios axios Oracle Corporation Siemens AG

Product-sinec_ins goldengate axios axios/axios

CWE ID-CWE-1333

Inefficient Regular Expression Complexity

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-22883

Matching Score-8

Assigner-HackerOne

View Details

Matching Score-8

Assigner-HackerOne

CVSS Score-7.5||HIGH

EPSS-87.36% / 99.42%

7 Day CHG~0.00%

Published-03 Mar, 2021 | 17:38

Updated-30 Apr, 2025 | 22:24

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

Vendor-Node.js (OpenJS Foundation)Oracle Corporation NetApp, Inc.Siemens AG Fedora Project

Product-sinec_infrastructure_network_services peoplesoft_enterprise_peopletools graalvm e-series_performance_analyzer mysql_cluster nosql_database fedora jd_edwards_enterpriseone_tools node.js Node

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2021-33737

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.55%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-03 Aug, 2024 | 23:58

A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-7987

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.5||HIGH

EPSS-0.84% / 73.84%

7 Day CHG~0.00%

Published-13 Feb, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start might be required to recover the system, a Denial-of-Service Vulnerability.

Vendor-n/a Siemens AG

Product-eta4_firmware eta2_firmware sicam_ak sicam_bc sicam_bc_1703 sicam_ak_3 sicam_tm_1703 sicam_tm Siemens SICAM RTU Devices before 08

CVE-2024-38879

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.20% / 42.69%

7 Day CHG~0.00%

Published-02 Aug, 2024 | 10:36

Updated-20 Sep, 2024 | 23:26

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumvent authentication and directly access the exposed application.

Vendor-Siemens AG

Product-omnivise_t3000_application_server Omnivise T3000 Application Server R9.2 Omnivise T3000 R8.2 SP3 Omnivise T3000 R8.2 SP4 omnivise_t3000_application_server omnivise_t3000

CWE ID-CWE-20

Improper Input Validation

CVE-2020-24486

Matching Score-6

Assigner-Intel Corporation

View Details

Matching Score-6

Assigner-Intel Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 18.65%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 18:53

Updated-04 Aug, 2024 | 15:12

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

Vendor-n/a NetApp, Inc.Intel Corporation Siemens AG

Product-xeon_platinum_8153 xeon_e3-1230_v5 xeon_e3-1558l_v5 xeon_w-3245m xeon_e5-4610_v4 xeon_e7-8894_v4 xeon_gold_6146 xeon_e5-2660_v3 core_i7-1068ng7 e-series_bios core_i7-1160g7 xeon_e5-1680_v3 xeon_d-1527 xeon_e5-2697_v4 xeon_gold_5115 xeon_platinum_8170 xeon_gold_6136 xeon_w-2125 core_i9-10940x xeon_e5-4610_v3 xeon_e5-4650_v4 xeon_e7-8880_v4 xeon_gold_6138 xeon_e5-1660_v4 simatic_ipc547g_firmware xeon_e7-8891_v4 xeon_platinum_8164 xeon_e-2226g xeon_e3-1280_v5 xeon_gold_6234 xeon_e5-2699r_v4 xeon_w-2255 xeon_d-1518 core_i7-11700 core_i7-6822eq core_i7-6700te xeon_e3-1501l_v6 xeon_gold_6262v core_i7-11370h xeon_e5-2683_v4 xeon_platinum_8168 core_i7-7600u xeon_e5-2608l_v4 xeon_e5-2640_v3 xeon_e-2224 xeon_gold_5218 xeon_e5-1620_v4 core_i7-11850h xeon_d-1567 xeon_e5-2630l_v3 xeon_e3-1505l_v6 xeon_e-2278ge xeon_e5-1607_v3 xeon_e5-4640_v4 xeon_gold_5117 xeon_gold_5122 xeon_w-2245 xeon_d-1587 xeon_e5-2699_v3 xeon_d-2191 xeon_gold_6248r core_i7-7820hk xeon_e5-2689_v4 xeon_e7-8870_v4 xeon_w-1290t core_i5-l16g7 xeon_gold_6240 core_i7-6970hq xeon_gold_6262 xeon_platinum_8156 xeon_e-2136 core_i7-10510u core_i7-1060g7 xeon_w-2265 xeon_e5-2667_v4 xeon_platinum_8274 xeon_w-10855m xeon_gold_6126f xeon_d-1539 xeon_e3-1535m_v5 xeon_e5-1680_v4 core_i7-7700 xeon_gold_5220r xeon_d-2146nt xeon_e3-1268l_v5 xeon_platinum_8160f xeon_e5-2658_v3 xeon_e5-4660_v4 core_i7-8750h xeon_e3-1501m_v6 xeon_gold_6250l xeon_gold_6210u xeon_d-2187nt xeon_platinum_8160m core_i7-10700f xeon_d-2166nt xeon_e3-1270_v6 xeon_e-2286m xeon_e3-1505m_v5 core_i7-10750h xeon_silver_4216 xeon_gold_6230 xeon_platinum_8253 xeon_e5-2630l_v4 xeon_w-2195 xeon_e5-4667_v4 xeon_e5-2628l_v4 xeon_e-2276g xeon_e5-2685_v3 xeon_w-1390 xeon_e-2186g xeon_d-2183it xeon_silver_4116t xeon_e-2174g xeon_e5-2630_v4 xeon_d-1622 core_i7-8809g xeon_e5-4667_v3 xeon_platinum_8160h core_i7-8700b xeon_e5-2643_v3 xeon_d-2145nt xeon_d-1581 xeon_e5-1650_v4 xeon_gold_6238 xeon_e5-2630_v3 xeon_w-1250p xeon_silver_4208 xeon_e3-1585_v5 xeon_w-2104 xeon_e5-2623_v4 core_i7-6560u xeon_w-2123 xeon_gold_5220s xeon_w-3275m xeon_platinum_9282 xeon_e5-2683_v3 core_i7-10700e xeon_silver_4108 xeon_gold_6130t xeon_silver_4210 core_i7-11700kf cloud_backup core_i7-10870h xeon_e7-8867_v4 xeon_bronze_3106 xeon_w-2102 xeon_e-2274g core_i7-10700k xeon_e-2278gel xeon_d-1540 xeon_e3-1280_v6 hci_compute_node_bios xeon_e5-2698_v4 xeon_platinum_8160t core_i7-11700k xeon_d-1528 xeon_silver_4214r core_i7-6500u xeon_e5-2697_v3 xeon_e5-4627_v4 xeon_e-2124 core_i7-10710u xeon_d-2141i core_i7-10700kf xeon_d-1541 xeon_e5-2660_v4 xeon_e7-4830_v4 xeon_w-1250te xeon_platinum_8268 xeon_platinum_8176m xeon_e-2276me core_i7-8565u xeon_gold_5222 xeon_e5-2687w_v4 xeon_e5-1603_v3 core_i7-7560u xeon_gold_5117f xeon_e3-1535m_v6 xeon_d-1548 xeon_d-1649n xeon_d-1529 xeon_platinum_9221 xeon_e3-1220_v5 xeon_platinum_8160 xeon_e5-2428l_v3 core_i7-6700hq xeon_e7-4809_v4 xeon_e5-4648_v3 xeon_gold_6122 xeon_silver_4123 xeon_gold_6148f xeon_gold_6132 bios xeon_e5-2618l_v4 xeon_w-2155 xeon_gold_6137 core_i7-7500u core_i7-8550u xeon_e-2224g xeon_w-2135 xeon_d-1623n xeon_w-2145 xeon_e-2226ge core_i7-6650u xeon_gold_6142 core_i7-10610u core_i7-8500y core_i7-7567u xeon_silver_4214 xeon_w-1390p xeon_d-2161i xeon_silver_4210r xeon_d-1632 core_i7-7820hq xeon_e3-1585l_v5 xeon_e5-2620_v3 xeon_e5-2670_v3 xeon_gold_5218b xeon_e5-2648l_v3 xeon_gold_6142m xeon_e5-2609_v3 xeon_e3-1275_v5 xeon_e5-2438l_v3 xeon_e3-1240_v5 xeon_e5-2650_v3 xeon_gold_6222 core_i7-6567u xeon_e5-2648l_v4 xeon_e5-4620_v4 xeon_e7-8855_v4 xeon_d-1513n xeon_d-1537 xeon_e3-1515m_v5 xeon_w-1290te xeon_e3-1225_v5 xeon_gold_6209u xeon_silver_4112 xeon_d-1559 xeon_w-3223 xeon_gold_5120t xeon_w-3175x xeon_gold_6134 xeon_gold_6162 xeon_e5-2628l_v3 xeon_e-2254me xeon_w-3235 core_i7-7y75 xeon_e5-4669_v3 xeon_w-2225 xeon_gold_6130h xeon_w-2133 core_i7-6700 xeon_d-1557 xeon_e5-4627_v3 xeon_e7-4850_v4 xeon_gold_6148 xeon_e3-1505m_v6 xeon_gold_6144 xeon_gold_6140m xeon_gold_5220t xeon_platinum_8276l xeon_w-2223 xeon_e5-2679_v4 core_i7-7700k core_i7-8705g xeon_e-2276m core_i7-8665u xeon_gold_6129 xeon_platinum_9222 xeon_gold_6230t core_i7-7660u core_i7-6600u core_i7-8706g xeon_gold_6126t core_i7-11700f xeon_platinum_8165 xeon_w-3225 xeon_gold_6135 xeon_e3-1565l_v5 xeon_e-2236 xeon_w-1370 core_i7-10850h xeon_e5-1603_v4 core_i7-1185gre xeon_e5-2408l_v3 core_i7-11375h xeon_e3-1240_v6 xeon_d-1573n core_i7-8700 core_i7-7700t core_i7-10700t xeon_e5-1630_v4 xeon_e5-4660_v3 xeon_gold_6246 core_i7-8086k xeon_w-2295 core_i7-6770hq core_i7-8700k xeon_e5-2603_v3 fas_bios xeon_e-2134 xeon_e5-2667_v3 xeon_gold_5215 xeon_e5-4655_v3 xeon_d-2143it xeon_d-2163it xeon_e5-2699_v4 xeon_e3-1285_v6 xeon_w-1390t xeon_w-1270 xeon_e3-1225_v6 xeon_platinum_8284 xeon_silver_4109t core_i7-10510y xeon_e3-1240l_v5 xeon_e5-2690_v3 xeon_e5-4655_v4 xeon_gold_5215l xeon_silver_4215r xeon_e5-2658_v4 xeon_gold_6138f core_i7-11800h xeon_e5-1630_v3 xeon_silver_4210t xeon_e5-2680_v3 xeon_gold_6212u xeon_e3-1205_v6 core_i7-7700hq xeon_w-1270te xeon_silver_4114 xeon_e5-2698_v3 core_i7-6498du xeon_e3-1245_v5 core_i7-6870hq xeon_gold_6258r xeon_bronze_3104 xeon_d-1571 xeon_gold_6240l xeon_gold_6238l xeon_e5-2637_v3 xeon_e5-1620_v3 xeon_gold_6250 xeon_d-2173it core_i7-11700t xeon_w-11855m xeon_d-2123it xeon_gold_5219y xeon_e-2246g xeon_w-3265m xeon_d-1627 xeon_e5-2637_v4 xeon_e5-2687w_v3 xeon_d-1602 xeon_e7-8890_v4 xeon_e5-2680_v4 xeon_gold_5218t xeon_e5-2697a_v4 xeon_gold_6150 xeon_gold_6140 xeon_e5-2690_v4 xeon_e5-2609_v4 core_i7-7920hq xeon_platinum_8174 xeon_d-1612 xeon_e-2254ml xeon_e3-1545m_v5 core_i7-10700 core_i9-10920x xeon_e3-1578l_v5 core_i7-6660u xeon_e3-1270_v5 xeon_gold_6126 xeon_e3-1260l_v5 xeon_w-1250e xeon_e5-2643_v4 xeon_d-1563n xeon_e5-2699a_v4 core_i7-10875h xeon_e-2276ml xeon_e-2244g xeon_e-2176g xeon_gold_6142f core_i3-l13g4 core_i7-8709g xeon_e5-4650_v3 xeon_e5-2650l_v4 xeon_gold_6130 xeon_e-2104g xeon_platinum_8260 core_i7-8557u simatic_ipc547g core_i7-8700t xeon_platinum_9242 core_i7-6820hq xeon_platinum_8280l xeon_silver_4110 core_i7-8650u xeon_bronze_3204 xeon_gold_5119t core_i7-1180g7 core_i7-6700t core_i7-6920hq xeon_gold_6246r xeon_e3-1230_v6 xeon_gold_5217 xeon_gold_6230n xeon_gold_6143 xeon_w-3265 xeon_gold_5218n xeon_e5-2620_v4 xeon_gold_6138t xeon_w-3245 xeon_gold_5120 core_i7-1185g7 core_i7-1195g7 xeon_e-2124g core_i7-1165g7 xeon_e5-2618l_v3 xeon_d-1523n xeon_e5-2608l_v3 core_i7-10700te xeon_e-2288g xeon_d-1653n xeon_gold_5220 xeon_e-2234 xeon_d-1577 xeon_d-1637 xeon_gold_6254 xeon_gold_6269y xeon_silver_4114t core_i7-6700k xeon_gold_6240y xeon_e5-4669_v4 aff_bios xeon_gold_6154 xeon_w-1250 xeon_e5-2640_v4 hci_storage_node_bios xeon_gold_6208u xeon_e7-8893_v4 xeon_w-1290e xeon_e5-1650_v3 xeon_w-3275 core_i7-11700b xeon_d-1553n xeon_e-2126g xeon_silver_4209t xeon_e5-4620_v3 xeon_silver_4116 xeon_w-1270e xeon_d-1633n core_i7-7820eq xeon_gold_6252n xeon_e7-4820_v4 xeon_gold_6244 xeon_e5-2695_v3 xeon_gold_6248 xeon_e3-1220_v6 xeon_w-1370p xeon_platinum_8280 xeon_e-2186m xeon_e5-1660_v3 xeon_d-1520 xeon_e-2176m core_i7-6785r core_i7-6820hk xeon_platinum_8256 xeon_gold_6152 core_i7-1060ng7 xeon_e5-2623_v3 xeon_platinum_8158 xeon_e5-2658a_v3 xeon_e5-2418l_v3 xeon_w-1290p xeon_e-2286g xeon_gold_6222v xeon_platinum_8176 xeon_gold_6242 xeon_e3-1275_v6 xeon_d-1531 core_i7-10810u xeon_e3-1575m_v5 xeon_e-2278g xeon_e5-2650_v4 xeon_platinum_8260y xeon_e3-1505l_v5 xeon_platinum_8270 xeon_d-1533n xeon_gold_6242r xeon_e3-1245_v6 xeon_gold_6128 xeon_silver_4215 xeon_d-2142it xeon_platinum_8180m core_i7-8850h xeon_gold_5118 xeon_w-2235 xeon_e5-2695_v4 xeon_gold_6130f xeon_w-11955m core_i7-6820eq xeon_gold_6134m core_i9-10900x xeon_platinum_8276 xeon_gold_6238t xeon_e3-1235l_v5 xeon_silver_4214y xeon_e5-2603_v4 core_i9-10980xe xeon_e5-4628l_v4 xeon_e7-8860_v4 xeon_w-1350 xeon_silver_4106h xeon_gold_6138p core_i7-8665ue xeon_w-1290 xeon_platinum_8176f xeon_d-1524n solidfire_bios xeon_gold_6240r xeon_w-10885m xeon_w-2275 xeon_d-1543n xeon_gold_6226 xeon_e-2144g xeon_gold_6256 xeon_d-1521 xeon_w-1350p xeon_gold_6230r core_i7-8569u xeon_gold_6252 xeon_e5-4640_v3 core_i7-1185g7e xeon_gold_5218r xeon_gold_6226r xeon_bronze_3206r xeon_e5-1607_v4 core_i7-1065g7 xeon_platinum_8260l xeon_e5-1428l_v3 core_i7-8559u xeon_platinum_8170m xeon_e-2146g xeon_platinum_8180 xeon_d-2177nt xeon_e5-2650l_v3 xeon_w-2175 Intel(R) Processors

CWE ID-CWE-20

Improper Input Validation

CVE-2024-41976

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.6||HIGH

EPSS-0.75% / 72.22%

7 Day CHG~0.00%

Published-13 Aug, 2024 | 07:54

Updated-23 Aug, 2024 | 18:40

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2024-35212

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.29% / 51.90%

7 Day CHG~0.00%

Published-11 Jun, 2024 | 11:15

Updated-11 Feb, 2025 | 11:15

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker can gain access to the Database entries.

Vendor-Siemens AG

Product-sinec_traffic_analyzer SINEC Traffic Analyzer sinec_traffic_analyzer

CWE ID-CWE-20

Improper Input Validation

CVE-2023-26293

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.3||HIGH

EPSS-0.04% / 12.10%

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:03

Updated-25 Nov, 2024 | 21:18

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.

Vendor-Siemens AG

Product-tia_portal Totally Integrated Automation Portal (TIA Portal) V16 Totally Integrated Automation Portal (TIA Portal) V15 Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V18

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2017-6867

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.61% / 68.89%

7 Day CHG~0.00%

Published-11 May, 2017 | 10:00

Updated-20 Apr, 2025 | 01:37

A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_wincc_runtime simatic_wincc simatic_wincc_\(tia_portal\)Siemens SIMATIC WinCC

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-14023

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-4.9||MEDIUM

EPSS-2.77% / 85.45%

7 Day CHG~0.00%

Published-06 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_pcs7 simatic_wincc Siemens SIMATIC PCS 7

CWE ID-CWE-20

Improper Input Validation

CVE-2022-43545

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-9.9||CRITICAL

EPSS-1.14% / 77.48%

7 Day CHG~0.00%

Published-08 Nov, 2022 | 00:00

Updated-03 Aug, 2024 | 13:32

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

Vendor-Siemens AG

Product-7kg9501-0aa01-2aa1_firmware 7kg9501-0aa01-2aa1 7kg9501-0aa31-2aa1 7kg9501-0aa31-2aa1_firmware SICAM P850 POWER METER SICAM Q100 SICAM P855

CWE ID-CWE-20

Improper Input Validation

CVE-2017-0148

Matching Score-6

Assigner-Microsoft Corporation

View Details

Matching Score-6

Assigner-Microsoft Corporation

CVSS Score-8.1||HIGH

EPSS-94.17% / 99.91%

7 Day CHG~0.00%

Published-17 Mar, 2017 | 00:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-04-27||Apply updates per vendor instructions.

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-9156

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.3||HIGH

EPSS-0.50% / 64.77%

7 Day CHG~0.00%

Published-05 Dec, 2016 | 08:09

Updated-12 Apr, 2025 | 10:46

A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP.

Vendor-n/a Siemens AG

Product-sicam_pas\/pqs Siemens SICAM PAS through V8.08

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-284

Improper Access Control

CVE-2022-40227

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.04% / 11.44%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 12:14

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.

Vendor-Siemens AG

Product-siplus_hmi_ktp900_basic simatic_hmi_ktp_mobile_panels_firmware siplus_hmi_ktp400_basic_firmware simatic_hmi_ktp700_basic simatic_hmi_ktp700_basic_firmware simatic_hmi_ktp1200_basic_firmware siplus_hmi_ktp400_basic simatic_hmi_ktp900_basic_firmware simatic_hmi_ktp_mobile_panels simatic_hmi_ktp400_basic_firmware simatic_hmi_ktp1200_basic siplus_hmi_ktp1200_basic siplus_hmi_ktp700_basic simatic_hmi_ktp400_basic siplus_hmi_ktp1200_basic_firmware simatic_hmi_comfort_panels simatic_hmi_ktp900_basic simatic_hmi_comfort_panels_firmware siplus_hmi_ktp900_basic_firmware siplus_hmi_ktp700_basic_firmware SIPLUS HMI KTP1200 BASIC SIMATIC HMI KTP700 Basic SIPLUS HMI KTP400 BASIC SIMATIC HMI Comfort Panels (incl. SIPLUS variants)SIPLUS HMI KTP700 BASIC SIMATIC HMI KTP900 Basic SIMATIC HMI KTP400 Basic SIMATIC HMI KTP1200 Basic SIMATIC HMI KTP Mobile Panels SIPLUS HMI KTP900 BASIC

CWE ID-CWE-20

Improper Input Validation

CVE-2022-32253

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.18% / 39.84%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:22

Updated-03 Aug, 2024 | 07:39

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker.

Vendor-Siemens AG

Product-sinema_remote_connect_server SINEMA Remote Connect Server

CWE ID-CWE-20

Improper Input Validation

CVE-2016-9042

Matching Score-6

Assigner-Talos

View Details

Matching Score-6

Assigner-Talos

CVSS Score-3.7||LOW

EPSS-2.53% / 84.84%

7 Day CHG~0.00%

Published-04 Jun, 2018 | 20:00

Updated-17 Sep, 2024 | 03:53

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

Vendor-ntp FreeBSD Foundation Talos (Cisco Systems, Inc.)Hewlett Packard Enterprise (HPE)Siemens AG

Product-freebsd ntp simatic_net_cp_443-1_opc_ua simatic_net_cp_443-1_opc_ua_firmware hpux-ntp Network Time Protocol

CWE ID-CWE-20

Improper Input Validation

CVE-2016-5743

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-5.63% / 89.98%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.

Vendor-n/a Siemens AG

Product-simatic_wincc_runtime_professional simatic_batch simatic_wincc simatic_pcs_7 simatic_openpcs_7 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-36362

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.05%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-08 Oct, 2024 | 09:15

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recovered by power cycling the device.

CWE ID-CWE-20

Improper Input Validation

CVE-2022-36363

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.54% / 66.67%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-08 Oct, 2024 | 08:39

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). Affected devices do not properly validate an offset value which can be defined in TCP packets when calling a method. This could allow an attacker to retrieve parts of the content of the memory.

CWE ID-CWE-1285

Improper Validation of Specified Index, Position, or Offset in Input

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5386

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.68% / 70.66%

7 Day CHG~0.00%

Published-16 Jul, 2015 | 19:00

Updated-12 Apr, 2025 | 10:46

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests.

Vendor-n/a Siemens AG

Product-sicam_mic_firmware sicam_mic n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-2031

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.97% / 75.74%

7 Day CHG~0.00%

Published-31 Jan, 2020 | 19:33

Updated-05 Aug, 2024 | 23:17

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.

Vendor-n/a Siemens AG Aruba Networks

Product-aruba_instant airwave arubaos scalance_w1750d_firmware scalance_w1750d n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-44228

Matching Score-6

Assigner-Apache Software Foundation

View Details

Matching Score-6

Assigner-Apache Software Foundation

CVSS Score-10||CRITICAL

EPSS-94.36% / 99.96%

7 Day CHG~0.00%

Published-10 Dec, 2021 | 00:00

Updated-08 Aug, 2025 | 18:52

Known KEV||Action Due Date - 2021-12-24||For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Vendor-percussion snowsoftware Apple Inc.The Apache Software Foundation Fedora Project Cisco Systems, Inc.Siemens AG Intel Corporation NetApp, Inc.Bentley Systems, Incorporated SonicWall Inc.Debian GNU/Linux

Product-common_services_platform_collector solidfire_enterprise_sds oncommand_insight datacenter_manager active_iq_unified_manager operation_scheduler connected_analytics_for_network_deployment industrial_edge_management_hub snapcenter integrated_management_controller_supervisor firepower_1150 iot_operations_dashboard wan_automation_engine firepower_2140 system_studio virtualized_voice_browser firepower_2110 dna_center solid_edge_cam_pro 6bk1602-0aa42-0tp0 energyip comos secure_device_onboard firepower_4120 sppa-t3000_ses3000_firmware siveillance_viewpoint firepower_1120 genomics_kernel_library contact_center_domain_manager crosswork_data_gateway xpedition_package_integrator network_dashboard_fabric_controller 6bk1602-0aa22-0tp0_firmware cloud_secure_agent nexus_insights 6bk1602-0aa22-0tp0 firepower_1010 6bk1602-0aa32-0tp0 email_security unified_contact_center_management_portal opcenter_intelligence xcode dna_spaces_connector finesse solidfire_\&_hci_storage_node packaged_contact_center_enterprise unified_sip_proxy cloudcenter_suite ucs_director energy_engage fxos customer_experience_cloud_agent paging_server logo\!_soft_comfort firepower_2130 siveillance_control_pro spectrum_power_7 cloud_manager network_insights_for_data_center synchro_4d 6bk1602-0aa52-0tp0 solid_edge_harness_design fog_director network_assurance_engine firepower_4115 nexus_dashboard smart_phy business_process_automation 6bk1602-0aa42-0tp0_firmware broadworks firepower_4140 emergency_responder ucs_central computer_vision_annotation_tool video_surveillance_manager connected_mobile_experiences synchro head-end_system_universal_device_integration_system sentron_powermanager fedora cloudcenter_cost_optimizer 6bk1602-0aa12-0tp0_firmware spectrum_power_4 cloudcenter vm_access_proxy cloudcenter_suite_admin oneapi_sample_browser 6bk1602-0aa52-0tp0_firmware firepower_4150 virtual_topology_system firepower_9300 prime_service_catalog brocade_san_navigator enterprise_chat_and_email cloud_connect firepower_4145 teamcenter unified_customer_voice_portal cloud_insights rhythmyx firepower_1140 sipass_integrated siveillance_vantage intersight_virtual_appliance sd-wan_vmanage ucs_central_software contact_center_management_portal webex_meetings_server unified_intelligence_center unified_workforce_optimization energyip_prepay crosswork_zero_touch_provisioning cx_cloud_agent 6bk1602-0aa12-0tp0 unity_connection cloudcenter_workload_manager optical_network_controller virtualized_infrastructure_manager video_surveillance_operations_manager 6bk1602-0aa32-0tp0_firmware unified_communications_manager advanced_malware_protection_virtual_private_cloud_appliance identity_services_engine snow_commander cyber_vision_sensor_management_extension firepower_4112 unified_contact_center_enterprise debian_linux unified_computing_system unified_contact_center_express xpedition_enterprise log4j desigo_cc_advanced_reports ontap_tools unified_communications_manager_im_and_presence_service firepower_2120 mobility_services_engine crosswork_network_automation dna_spaces vesys automated_subsea_tuning cyber_vision siveillance_command evolved_programmable_network_manager dna_spaces\firepower_4110 mendix firepower_4125 sppa-t3000_ses3000 unified_communications_manager_im_\&_presence_service e-car_operation_center nx industrial_edge_management workload_optimization_manager firepower_threat_defense navigator capital crosswork_platform_infrastructure network_services_orchestrator data_center_network_manager crosswork_optimization_engine mindsphere siguard_dsa gma-manager desigo_cc_info_center crosswork_network_controller siveillance_identity Apache Log4j2 Log4j2

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CVE-2021-44695

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.06% / 19.73%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-1286

Improper Validation of Syntactic Correctness of Input

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7855

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-60.88% / 98.23%

7 Day CHG~0.00%

Published-07 Aug, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

Vendor-ntp n/a Debian GNU/Linux NetApp, Inc.Siemens AG

Product-oncommand_unified_manager oncommand_performance_manager oncommand_balance tim_4r-ie_dnp3_firmware clustered_data_ontap tim_4r-ie_dnp3 debian_linux tim_4r-ie_firmware tim_4r-ie ntp data_ontap n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-31766

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.6||HIGH

EPSS-0.33% / 55.52%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-21 Apr, 2025 | 13:48

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.1.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.1.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.1.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.1.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.1.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.1.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.1.2), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions >= V1.1.0 < V3.0.0). Affected devices with TCP Event service enabled do not properly handle malformed packets. This could allow an unauthenticated remote attacker to cause a denial of service condition and reboot the device thus possibly affecting other network resources.

Vendor-Siemens AG

Product-scalance_m812-1 scalance_mum853-1 scalance_m826-2_firmware scalance_m874-3 scalance_m874-3_firmware scalance_wam766-1 scalance_m876-3 scalance_m816-1_firmware ruggedcom_rm1224 scalance_wam763-1_firmware scalance_m816-1 scalance_m804pb_firmware scalance_mum856-1_firmware scalance_s615_firmware scalance_wum766-1 scalance_m876-3_firmware scalance_m812-1_firmware scalance_m826-2 scalance_mum856-1 scalance_wam766-1_firmware scalance_wam763-1 scalance_m876-4 scalance_m876-4_firmware scalance_s615 scalance_wum763-1 scalance_m804pb scalance_wum763-1_firmware ruggedcom_rm1224_firmware scalance_m874-2_firmware scalance_m874-2 scalance_wum766-1_firmware scalance_mum853-1_firmware SCALANCE M876-3 (ROK)SCALANCE M876-4 (NAM)SCALANCE MUM856-1 (EU)RUGGEDCOM RM1224 LTE(4G) EU SCALANCE M876-4 SCALANCE WAM766-1 (US)SCALANCE M826-2 SHDSL-Router SCALANCE S615 EEC LAN-Router RUGGEDCOM RM1224 LTE(4G) NAM SCALANCE MUM853-1 (EU)SCALANCE WAM766-1 SCALANCE WUM763-1 SCALANCE WUM766-1 SCALANCE M812-1 ADSL-Router SCALANCE M876-3 SCALANCE M876-4 (EU)SCALANCE WAM766-1 EEC (US)SCALANCE WAM766-1 EEC SCALANCE S615 LAN-Router SCALANCE MUM856-1 (RoW)SCALANCE M816-1 ADSL-Router SCALANCE M874-3 SCALANCE M804PB SCALANCE WAM763-1 SCALANCE M874-2 SCALANCE WUM766-1 (USA)

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7705

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-29.58% / 96.45%

7 Day CHG~0.00%

Published-07 Aug, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.

Vendor-ntp n/a NetApp, Inc.Siemens AG Citrix (Cloud Software Group, Inc.)

Product-oncommand_unified_manager oncommand_performance_manager tim_4r-ie_dnp3_firmware clustered_data_ontap tim_4r-ie_dnp3 xenserver tim_4r-ie_firmware tim_4r-ie ntp data_ontap n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2025-40746

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-9.4||CRITICAL

EPSS-0.27% / 50.23%

7 Day CHG~0.00%

Published-12 Aug, 2025 | 11:17

Updated-20 Aug, 2025 | 20:58

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT Authority/SYSTEM' privileges.

Vendor-Siemens AG

Product-simatic_rtls_locating_manager SIMATIC RTLS Locating Manager

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37206

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.58% / 67.79%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.

Vendor-Siemens AG

Product-siprotec_5_with_cpu_variant_cp300 siprotec_5_with_cpu_variant_cp100 siprotec_5_with_cpu_variant_cp050 SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100

CWE ID-CWE-20

Improper Input Validation

CVE-2015-2822

Matching Score-6

Assigner-MITRE Corporation

View Details

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.60% / 68.47%

7 Day CHG~0.00%

Published-08 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102.

Vendor-n/a Siemens AG

Product-wincc n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-29872

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-1.29% / 78.85%

7 Day CHG~0.00%

Published-10 May, 2022 | 09:47

Updated-03 Aug, 2024 | 06:33

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Vendor-Siemens AG

CWE ID-CWE-141

Improper Neutralization of Parameter/Argument Delimiters

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34311

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Mono_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13352)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34310

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13351)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34291

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12956)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34300

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13194)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34316

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The DL180CoolType.dll library in affected applications lacks proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13380)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34331

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data when parsing JT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13442)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34298

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13060)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2016-9158

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Affected

Affected

Affected

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs