ByteOS Network

Vulnerability Details :

CVE-2022-24040

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-10 May, 2022 | 09:46

Updated At-03 Aug, 2024 | 03:59

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application fails to enforce an upper bound to the cost factor of the PBKDF2 derived key during the creation or update of an account. An attacker with the user profile access privilege could cause a denial of service (DoS) condition through CPU consumption by setting a PBKDF2 derived key with a remarkably high cost effort and then attempting a login to the so-modified account.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:siemens

Assigner Org ID:cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At:10 May, 2022 | 09:46

Updated At:03 Aug, 2024 | 03:59

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Siemens AG

Product

Desigo DXR2

Versions

Affected

All versions < V01.21.142.5-22

Vendor

Siemens AG

Product

Desigo PXC3

Versions

Affected

All versions < V01.21.142.4-18

Vendor

Siemens AG

Product

Desigo PXC4

Versions

Affected

All versions < V02.20.142.10-10884

Vendor

Siemens AG

Product

Desigo PXC5

Versions

Affected

All versions < V02.20.142.10-10884

Problem Types

Type	CWE ID	Description
CWE	CWE-400	CWE-400: Uncontrolled Resource Consumption

Type: CWE

CWE ID: CWE-400

Description: CWE-400: Uncontrolled Resource Consumption

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf	x_refsource_MISC

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf	x_refsource_MISC x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:productcert@siemens.com

Published At:10 May, 2022 | 11:15

Updated At:06 Oct, 2022 | 02:50

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:N/I:N/A:P

CPE Matches

Siemens AG

>>desigo_pxc5_firmware>>Versions before 02.20.142.10-10884(exclusive)

cpe:2.3:o:siemens:desigo_pxc5_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>desigo_pxc5>>-

cpe:2.3:h:siemens:desigo_pxc5:-:*:*:*:*:*:*:*

Siemens AG

>>desigo_pxc4_firmware>>Versions before 02.20.142.10-10884(exclusive)

cpe:2.3:o:siemens:desigo_pxc4_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>desigo_pxc4>>-

cpe:2.3:h:siemens:desigo_pxc4:-:*:*:*:*:*:*:*

Siemens AG

>>desigo_pxc3_firmware>>Versions before 01.21.142.4-18(exclusive)

cpe:2.3:o:siemens:desigo_pxc3_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>desigo_pxc3>>-

cpe:2.3:h:siemens:desigo_pxc3:-:*:*:*:*:*:*:*

Siemens AG

>>desigo_dxr2_firmware>>Versions before 01.21.142.5-22(exclusive)

cpe:2.3:o:siemens:desigo_dxr2_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>desigo_dxr2>>-

cpe:2.3:h:siemens:desigo_dxr2:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-400	Primary	nvd@nist.gov
CWE-400	Secondary	productcert@siemens.com

CWE ID: CWE-400

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-400

Type: Secondary

Source: productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf	productcert@siemens.com	Vendor Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

Source: productcert@siemens.com

Resource:

Vendor Advisory

Similar CVEs

448Records found

CVE-2023-44321

Matching Score-10

Assigner-Siemens

View Details

Matching Score-10

Assigner-Siemens

CVSS Score-5.1||MEDIUM

EPSS-1.00% / 59.23%

7 Day CHG~0.00%

Published-14 Nov, 2023 | 11:04

Updated-25 Feb, 2026 | 16:51

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-34467

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.72% / 50.04%

7 Day CHG~0.00%

Published-12 Jul, 2022 | 10:07

Updated-03 Aug, 2024 | 09:15

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.

Vendor-mendix Siemens AG

Product-excel_importer Mendix Excel Importer Module (Mendix 9 compatible)Mendix Excel Importer Module (Mendix 8 compatible)

CWE ID-CWE-776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

CVE-2017-14023

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-4.9||MEDIUM

EPSS-3.67% / 88.49%

7 Day CHG~0.00%

Published-06 Nov, 2017 | 22:00

Updated-13 May, 2026 | 00:24

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_wincc simatic_pcs7 Siemens SIMATIC PCS 7

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10927

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-1.17% / 64.07%

7 Day CHG~0.00%

Published-13 Aug, 2019 | 18:55

Updated-04 Aug, 2024 | 22:40

A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.

Vendor-Siemens AG

Product-scalance_xp-200_firmware scalance_xb-200_firmware scalance_xf-200ba_firmware scalance_xc-200_firmware scalance_xc-200 scalance_xb-200 scalance_xr-300wg_firmware scalance_xr-300wg scalance_xp-200 scalance_xf-200ba SCALANCE XR-300WG SCALANCE XF-200BA SCALANCE SC-600 SCALANCE XP-200 SCALANCE XC-200 SCALANCE XB-200

CWE ID-CWE-703

Improper Check or Handling of Exceptional Conditions

CVE-2025-40593

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.32% / 24.61%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 10:34

Updated-16 Dec, 2025 | 19:33

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.

Vendor-Siemens AG

Product-simatic_cn_4100_firmware simatic_cn_4100 SIMATIC CN 4100

CWE ID-CWE-20

Improper Input Validation

CVE-2013-0669

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-4||MEDIUM

EPSS-1.83% / 76.60%

7 Day CHG~0.00%

Published-21 Mar, 2013 | 14:00

Updated-29 Apr, 2026 | 01:13

The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.

Vendor-n/a Siemens AG

Product-wincc_tia_portal n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2025-25248

Matching Score-8

Assigner-Fortinet, Inc.

View Details

Matching Score-8

Assigner-Fortinet, Inc.

CVSS Score-4.8||MEDIUM

EPSS-0.45% / 36.57%

7 Day CHG~0.00%

Published-12 Aug, 2025 | 18:59

Updated-14 Jul, 2026 | 12:40

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

Vendor-Fortinet, Inc.Siemens AG

Product-fortipam fortios fortiproxy FortiPAM FortiOS FortiProxy RUGGEDCOM APE1808

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2025-24812

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.53% / 41.56%

7 Day CHG~0.00%

Published-11 Feb, 2025 | 10:29

Updated-15 Apr, 2026 | 00:35

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0) (All versions < V4.7). Affected devices do not process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-1286

Improper Validation of Syntactic Correctness of Input

CVE-2026-54798

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.24% / 15.13%

7 Day CHG~0.00%

Published-09 Jul, 2026 | 14:15

Updated-09 Jul, 2026 | 17:00

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.

Vendor-Siemens AG

Product-SICORE Base system CPCI85 Central Processing/Communication

CWE ID-CWE-489

Active Debug Code

CVE-2020-14405

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.87% / 77.14%

7 Day CHG+0.02%

Published-17 Jun, 2020 | 15:11

Updated-04 Aug, 2024 | 12:46

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.

Vendor-libvnc_project n/a Debian GNU/Linux Siemens AG Canonical Ltd.

Product-simatic_itc1500_pro_firmware ubuntu_linux debian_linux simatic_itc1500_pro simatic_itc1500 simatic_itc1900 simatic_itc1900_firmware simatic_itc1900_pro_firmware simatic_itc1500_firmware simatic_itc2200_firmware simatic_itc2200_pro simatic_itc2200_pro_firmware libvncserver simatic_itc1900_pro simatic_itc2200 n/a

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2018-5380

Matching Score-8

Assigner-CERT/CC

View Details

Matching Score-8

Assigner-CERT/CC

CVSS Score-4.3||MEDIUM

EPSS-15.11% / 96.38%

7 Day CHG~0.00%

Published-19 Feb, 2018 | 13:00

Updated-17 Sep, 2024 | 01:05

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

Vendor-quagga Quagga Debian GNU/Linux Siemens AG Canonical Ltd.

Product-ubuntu_linux debian_linux quagga ruggedcom_rox_ii_firmware ruggedcom_rox_ii bgpd

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-25214

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

View Details

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

CVSS Score-6.5||MEDIUM

EPSS-5.94% / 92.48%

7 Day CHG~0.00%

Published-29 Apr, 2021 | 00:55

Updated-17 Sep, 2024 | 00:37

A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.

Vendor-Internet Systems Consortium, Inc.Debian GNU/Linux NetApp, Inc.Siemens AG Fedora Project

CWE ID-CWE-617

Reachable Assertion

CVE-2015-7855

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-31.07% / 98.07%

7 Day CHG~0.00%

Published-07 Aug, 2017 | 20:00

Updated-13 May, 2026 | 00:24

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

Vendor-ntp n/a Debian GNU/Linux Siemens AG NetApp, Inc.

Product-data_ontap tim_4r-ie debian_linux tim_4r-ie_dnp3_firmware oncommand_performance_manager ntp tim_4r-ie_dnp3 clustered_data_ontap oncommand_balance oncommand_unified_manager tim_4r-ie_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2024-47692

Matching Score-8

Assigner-kernel.org

View Details

Matching Score-8

Assigner-kernel.org

CVSS Score-6.5||MEDIUM

EPSS-1.17% / 64.06%

7 Day CHG~0.00%

Published-21 Oct, 2024 | 11:53

Updated-12 May, 2026 | 12:17

nfsd: return -EINVAL when namelen is 0

In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0 When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR. When we access the name.data that has been assigned the value of ZERO_SIZE_PTR in nfs4_client_to_reclaim(), null pointer dereference is triggered. [ T1205] ================================================================== [ T1205] BUG: KASAN: null-ptr-deref in nfs4_client_to_reclaim+0xe9/0x260 [ T1205] Read of size 1 at addr 0000000000000010 by task nfsdcld/1205 [ T1205] [ T1205] CPU: 11 PID: 1205 Comm: nfsdcld Not tainted 5.10.0-00003-g2c1423731b8d #406 [ T1205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014 [ T1205] Call Trace: [ T1205] dump_stack+0x9a/0xd0 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] __kasan_report.cold+0x34/0x84 [ T1205] ? nfs4_client_to_reclaim+0xe9/0x260 [ T1205] kasan_report+0x3a/0x50 [ T1205] nfs4_client_to_reclaim+0xe9/0x260 [ T1205] ? nfsd4_release_lockowner+0x410/0x410 [ T1205] cld_pipe_downcall+0x5ca/0x760 [ T1205] ? nfsd4_cld_tracking_exit+0x1d0/0x1d0 [ T1205] ? down_write_killable_nested+0x170/0x170 [ T1205] ? avc_policy_seqno+0x28/0x40 [ T1205] ? selinux_file_permission+0x1b4/0x1e0 [ T1205] rpc_pipe_write+0x84/0xb0 [ T1205] vfs_write+0x143/0x520 [ T1205] ksys_write+0xc9/0x170 [ T1205] ? __ia32_sys_read+0x50/0x50 [ T1205] ? ktime_get_coarse_real_ts64+0xfe/0x110 [ T1205] ? ktime_get_coarse_real_ts64+0xa2/0x110 [ T1205] do_syscall_64+0x33/0x40 [ T1205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ T1205] RIP: 0033:0x7fdbdb761bc7 [ T1205] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 514 [ T1205] RSP: 002b:00007fff8c4b7248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ T1205] RAX: ffffffffffffffda RBX: 000000000000042b RCX: 00007fdbdb761bc7 [ T1205] RDX: 000000000000042b RSI: 00007fff8c4b75f0 RDI: 0000000000000008 [ T1205] RBP: 00007fdbdb761bb0 R08: 0000000000000000 R09: 0000000000000001 [ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000042b [ T1205] R13: 0000000000000008 R14: 00007fff8c4b75f0 R15: 0000000000000000 [ T1205] ================================================================== Fix it by checking namelen.

Vendor-Siemens AG Linux Kernel Organization, Inc

Product-linux_kernel Linux SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family RUGGEDCOM RST2428P SCALANCE XCM-/XRM-/XCH-/XRH-300 family SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2024-39869

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.28% / 20.17%

7 Day CHG~0.00%

Published-09 Jul, 2024 | 12:05

Updated-27 Aug, 2025 | 20:42

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually.

Vendor-Siemens AG

Product-sinema_remote_connect_server SINEMA Remote Connect Server

CWE ID-CWE-754

Improper Check for Unusual or Exceptional Conditions

CVE-2024-33495

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.64% / 46.80%

7 Day CHG~0.00%

Published-14 May, 2024 | 10:02

Updated-15 Apr, 2026 | 00:35

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA30) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-1EA30) (All versions < V3.0.1.1). The affected application does not properly limit the size of specific logs. This could allow an unauthenticated remote attacker to exhaust system resources by creating a great number of log entries which could potentially lead to a denial of service condition. A successful exploitation requires the attacker to have access to specific SIMATIC RTLS Locating Manager Clients in the deployment.

Vendor-Siemens AG

Product-SIMATIC RTLS Locating Manager simatic_rtls_locating_manager

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2018-4856

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-1.29% / 67.29%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-17 Sep, 2024 | 03:28

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.

Vendor-Siemens AG

Product-siclock_tc400 siclock_tc400_firmware siclock_tc100_firmware siclock_tc100 SICLOCK TC100, SICLOCK TC400

CWE ID-CWE-287

Improper Authentication

CVE-2017-6867

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-1.92% / 77.78%

7 Day CHG~0.00%

Published-11 May, 2017 | 10:00

Updated-13 May, 2026 | 00:24

A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_wincc simatic_wincc_\(tia_portal\)simatic_wincc_runtime Siemens SIMATIC WinCC

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-46144

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.87% / 55.05%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:42

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Vendor-Siemens AG

CWE ID-CWE-664

Improper Control of a Resource Through its Lifetime

CVE-2022-40225

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.62% / 46.14%

7 Day CHG~0.00%

Published-11 Jun, 2024 | 14:19

Updated-03 Aug, 2024 | 12:14

A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

Vendor-Siemens AG

Product-siplus_tim_1531_irc siplus_tim_1531_irc_firmware TIM 1531 IRC SIPLUS TIM 1531 IRC tim_1531_irc siplus_tim_1531_irc

CWE ID-CWE-681

Incorrect Conversion between Numeric Types

CVE-2022-34661

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.65% / 47.26%

7 Day CHG~0.00%

Published-10 Aug, 2022 | 11:18

Updated-03 Sep, 2025 | 19:15

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter is vulnerable to denial of service by entering infinite loops and using up CPU cycles. This could allow an attacker to cause denial of service condition.

Vendor-Siemens AG

Product-teamcenter Teamcenter V13.0 Teamcenter V13.1 Teamcenter V13.3 Teamcenter V14.0 Teamcenter V12.4 Teamcenter V13.2

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2025-40831

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.34% / 26.33%

7 Day CHG~0.00%

Published-09 Dec, 2025 | 10:44

Updated-10 Dec, 2025 | 21:38

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.

Vendor-Siemens AG

Product-sinec_security_monitor SINEC Security Monitor

CWE ID-CWE-20

Improper Input Validation

CVE-2024-23814

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.60% / 45.06%

7 Day CHG~0.00%

Published-11 Feb, 2025 | 10:28

Updated-15 Apr, 2026 | 00:35

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2020-27827

Matching Score-6

Assigner-Red Hat, Inc.

View Details

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-3.23% / 86.95%

7 Day CHG~0.00%

Published-18 Mar, 2021 | 00:00

Updated-03 Dec, 2025 | 19:15

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Vendor-lldpd_project openvswitch n/a Fedora Project Red Hat, Inc.Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-27194

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.38% / 69.17%

7 Day CHG~0.00%

Published-12 Apr, 2022 | 09:07

Updated-03 Aug, 2024 | 05:25

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.

Vendor-Siemens AG

Product-simatic_pcs_neo totally_integrated_automation_portal sinetplan SIMATIC PCS neo (Administration Console)SINETPLAN TIA Portal

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-27640

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.35% / 27.98%

7 Day CHG~0.00%

Published-10 May, 2022 | 09:47

Updated-03 Aug, 2024 | 05:32

A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.

Vendor-Siemens AG

Product-simatic_cp_443-1_rna_firmware simatic_cp_442-1_rna simatic_cp_442-1_rna_firmware simatic_cp_443-1_rna SIMATIC CP 442-1 RNA SIMATIC CP 443-1 RNA

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2020-25242

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.27% / 66.75%

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-04 Aug, 2024 | 15:33

A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions). Specially crafted packets sent to TCP port 102 could cause a Denial-of-Service condition on the affected devices. A cold restart might be necessary in order to recover.

Vendor-Siemens AG

Product-simatic_net_cp_343-1_standard_firmware simatic_net_cp_343-1_advanced simatic_net_cp_343-1_standard simatic_net_cp_343-1_lean simatic_net_cp_343-1_advanced_firmware simatic_net_cp_343-1_lean_firmware SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants)SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants)SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants)

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-19300

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.50% / 71.58%

7 Day CHG~0.00%

Published-14 Apr, 2020 | 00:00

Updated-08 Jul, 2025 | 11:15

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-19301

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.33% / 68.01%

7 Day CHG~0.00%

Published-14 Apr, 2020 | 19:50

Updated-05 Aug, 2024 | 02:16

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-18336

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.67% / 74.42%

7 Day CHG~0.00%

Published-10 Mar, 2020 | 19:16

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13946

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.45% / 70.56%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Vendor-Siemens AG

Product-simatic_et200al_im_157-1_pn_firmware simatic_rf182c scalance_xr526 simatic_et200m_im153-4_pn_io_hf_firmware scalance_xr552_firmware simatic_et200mp_im155-5_pn_st_firmware scalance_xr552 simatic_cp_1616 ruggedcom_rm1224_firmware simatic_cp_1604 simatic_et200sp_im155-6_pn_hf dk_standard_ethernet_controller scalance_xr-300wg scalance_xp-200 simatic_et200mp_im155-5_pn_hf_firmware scalance_xf-200ba simatic_ipc_support scalance_x-400_firmware scalance_x-300 scalance_x-200irt simatic_cp_443-1 simatic_cp_343-1_erpc scalance_xf-200_firmware scalance_xf-200 simatic_et200sp_im155-6_pn_basic simatic_et200sp_im155-6_pn_hf_firmware scalance_s615_firmware simatic_cp_1616_firmware scalance_xr524_firmware scalance_w700_ieee_802.11n_firmware scalance_m-800_firmware simatic_et200m_im153-4_pn_io_st_firmware simatic_cp_443-1_advanced_firmware scalance_xc-200_firmware profinet_driver simatic_cp_343-1 simatic_et200al_im_157-1_pn im_154-3_pn_hf simatic_cp_343-1_lean_firmware simatic_mv420_firmware scalance_xr-300wg_firmware simatic_mv420 im_154-4_pn_hf simatic_et200ecopn scalance_x-200irt_firmware simatic_et200s_firmware scalance_xr526_firmware scalance_x-300_firmware ek-ertec_200 scalance_xr524 simatic_rf600 simatic_cp_443-1_opc_ua ek-ertec_200_firmware sinamics_dcp_firmware simatic_cp_443-1_advanced simatic_mv440 simatic_cp_343-1_firmware scalance_xm-400 simatic_et200pro_firmware simatic_cp_343-1_lean scalance_xf-200ba_firmware simatic_et200ecopn_firmware ek-ertec_200p_firmware scalance_xr528_firmware scalance_xr528 simatic_rf180c simatic_mv440_firmware ruggedcom_rm1224 scalance_x-400 simatic_cp_1604_firmware scalance_s615 im_154-4_pn_hf_firmware simatic_cp_343-1_advanced_firmware simatic_cp_443-1_opc_ua_firmware simatic_rf600_firmware scalance_w700_ieee_802.11n simatic_pn\/pn_coupler_firmware simatic_et200m_im153-4_pn_io_st ek-ertec_200p sinamics_dcp simatic_et200s simatic_rf182c_firmware scalance_xp-200_firmware simatic_et200sp_im155-6_pn_basic_firmware simatic_et200mp_im155-5_pn_st simatic_cp_443-1_firmware scalance_xb-200 simatic_et200sp_im155-6_pn_st_firmware im_154-3_pn_hf_firmware scalance_xm-400_firmware simatic_cp_343-1_erpc_firmware simatic_et200pro scalance_xb-200_firmware simatic_pn\/pn_coupler simatic_et200sp_im155-6_pn_st simatic_et200mp_im155-5_pn_hf scalance_xc-200 simatic_rf180c_firmware simatic_cp_343-1_advanced scalance_m-800 simatic_et200m_im153-4_pn_io_hf SCALANCE XF208 SIMOTION D SCALANCE XR324-4M EEC (24V, ports on front)SCALANCE X204IRT SCALANCE X307-2 EEC (2x 24V, coated)SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)SIMOTION P SCALANCE XB-200 family SCALANCE X204-2TS SCALANCE X307-3 SCALANCE XR324-12M (24V, ports on rear)SCALANCE X308-2 SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL SCALANCE X307-2 EEC (230V, coated)SIMATIC RF180C SIMATIC MV440 HR SIPLUS NET SCALANCE X308-2 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN: IO-Link Master SCALANCE X202-2P IRT SCALANCE XR324-4M PoE (230V, ports on rear)SCALANCE X302-7 EEC (230V)SIMATIC CP 443-1 SOFTNET-IE PNIO SCALANCE S615 LAN-Router SCALANCE X206-1LD SIMATIC CP 343-1 Advanced SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL SCALANCE W-700 IEEE 802.11n family SIPLUS ET 200SP IM 155-6 PN ST TX RAIL SIMATIC MV420 SR-B SCALANCE XR-500 family SINAMICS DCP SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 SCALANCE XF204IRT SCALANCE X307-2 EEC (2x 230V)SIMATIC ET 200MP IM 155-5 PN ST SCALANCE M826-2 SHDSL-Router SCALANCE XF-200BA SCALANCE X204IRT PRO SIMATIC MV420 SR-P SCALANCE XP-200 SIMATIC RF182C SIPLUS NET CP 443-1 SIMOTION C SCALANCE X201-3P IRT SCALANCE M804PB SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P SIPLUS ET 200SP IM 155-6 PN ST BA SIMATIC ET 200pro IM 154-3 PN HF SCALANCE X206-1 SCALANCE XF204 SIMATIC MV420 SR-B Body Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 SIMATIC IPC Support, Package for VxWorks SCALANCE X308-2LH SCALANCE XF204-2 SCALANCE XR324-4M EEC (24V, ports on rear)SCALANCE XR324-4M PoE (24V, ports on front)SCALANCE XM-400 family SCALANCE X302-7 EEC (2x 230V)SCALANCE X408-2 SCALANCE XF201-3P IRT SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL SIMATIC MV420 SR-P Body SCALANCE M816-1 ADSL-Router SIMATIC MV440 SR SCALANCE M812-1 ADSL-Router SCALANCE X307-2 EEC (2x 24V)SCALANCE X212-2 SCALANCE X306-1LD FE SCALANCE X308-2M TS SCALANCE M876-3 SIMATIC ET 200AL IM 157-1 PN SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 SIPLUS ET 200MP IM 155-5 PN ST TX RAIL SCALANCE X201-3P IRT PRO SCALANCE X302-7 EEC (2x 230V, coated)SCALANCE X320-1-2LD FE SCALANCE XR324-4M PoE TS (24V, ports on front)SCALANCE XR324-12M TS (24V)SCALANCE XR324-12M (230V, ports on rear)SCALANCE XF204-2BA IRT SCALANCE X204-2FM SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 SIMATIC CP 443-1 OPC UA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN, 4AO U/I 4xM12 SCALANCE X204-2LD TS SIMATIC ET 200SP IM 155-6 PN HF SCALANCE X302-7 EEC (24V, coated)SIMATIC CP 443-1 Advanced SCALANCE XR-300WG family SCALANCE X224 SIMATIC ET 200SP IM 155-6 PN ST SIPLUS ET 200SP IM 155-6 PN HF PROFINET Driver for Controller SIMATIC RF600R family SCALANCE M876-4 (NAM)SCALANCE M874-3 SCALANCE X308-2LD SCALANCE X307-2 EEC (24V)SIMATIC ET 200SP IM 155-6 PN BA SCALANCE X208 SCALANCE M876-3 (ROK)SCALANCE X304-2FE SCALANCE X307-2 EEC (230V)SIPLUS NET CP 343-1 Lean SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)SIMATIC ET 200SP IM 155-6 PN ST BA SCALANCE X302-7 EEC (2x 24V)SIMATIC ET 200MP IM 155-5 PN HF RUGGEDCOM RM1224 family SIMATIC ET 200pro IM 154-4 PN HF SCALANCE X208PRO SIPLUS NET CP 343-1 SCALANCE X212-2LD SCALANCE X302-7 EEC (24V)SCALANCE X204-2 SCALANCE XF206-1 SIMATIC ET200S (incl. SIPLUS variants)SIMATIC CP 343-1 Lean SCALANCE XR324-4M EEC (2x 24V, ports on rear)SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)SCALANCE XR324-4M PoE (24V, ports on rear)SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 SCALANCE X204-2LD SCALANCE M876-4 (EU)SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)SCALANCE X308-2M SCALANCE X308-2M PoE SCALANCE X310FE SCALANCE X308-2LH+SIPLUS NET CP 343-1 Advanced SIMATIC CP 343-1 SCALANCE X307-3LD Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 SIPLUS NET CP 443-1 Advanced SCALANCE XF202-2P IRT SCALANCE X307-2 EEC (24V, coated)SCALANCE X307-2 EEC (2x 230V, coated)SCALANCE X302-7 EEC (2x 24V, coated)SCALANCE X202-2P IRT PRO SCALANCE X310 SCALANCE XR324-12M (24V, ports on front)SIPLUS ET 200MP IM 155-5 PN ST SCALANCE X320-1 FE SCALANCE M874-2 SCALANCE XR324-4M PoE (230V, ports on front)SIMATIC CP 343-1 ERPC SIPLUS ET 200SP IM 155-6 PN ST SIMATIC MV440 UR SCALANCE X216 SIMATIC CP 1616 and CP 1604 SCALANCE X302-7 EEC (230V, coated)SIPLUS ET 200MP IM 155-5 PN HF SCALANCE X200-4P IRT SCALANCE XC-200 SCALANCE X202-2IRT SCALANCE XR324-12M (230V, ports on front)SCALANCE XR324-4M EEC (2x 24V, ports on front)

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-25622

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.85% / 54.34%

7 Day CHG~0.00%

Published-12 Apr, 2022 | 00:00

Updated-21 Apr, 2025 | 13:54

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-44228

Matching Score-6

Assigner-Apache Software Foundation

View Details

Matching Score-6

Assigner-Apache Software Foundation

CVSS Score-10||CRITICAL

EPSS-100.00% / 100.00%

7 Day CHG~0.00%

Published-10 Dec, 2021 | 00:00

Updated-20 Feb, 2026 | 16:15

Known KEV||Action Due Date - 2021-12-24||For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Vendor-snowsoftware percussion Cisco Systems, Inc.SonicWall Inc.NetApp, Inc.Siemens AG Bentley Systems, Incorporated Apple Inc.The Apache Software Foundation Intel Corporation Fedora Project Debian GNU/Linux

Product-firepower_4112 siveillance_vantage firepower_4125 sppa-t3000_ses3000 siveillance_command siguard_dsa packaged_contact_center_enterprise oneapi_sample_browser solidfire_enterprise_sds network_assurance_engine active_iq_unified_manager identity_services_engine paging_server smart_phy cx_cloud_agent mindsphere firepower_4115 industrial_edge_management unified_communications_manager_im_and_presence_service spectrum_power_7 xcode energyip_prepay 6bk1602-0aa52-0tp0_firmware virtual_topology_system computer_vision_annotation_tool ontap_tools teamcenter email_security unified_workforce_optimization fedora unified_contact_center_enterprise system_studio webex_meetings_server nexus_insights cloud_connect firepower_2130 operation_scheduler customer_experience_cloud_agent unified_customer_voice_portal unified_contact_center_management_portal vm_access_proxy enterprise_chat_and_email logo\!_soft_comfort 6bk1602-0aa32-0tp0_firmware rhythmyx siveillance_control_pro comos optical_network_controller cloud_secure_agent ucs_central_software 6bk1602-0aa12-0tp0 xpedition_enterprise firepower_1150 evolved_programmable_network_manager firepower_2120 6bk1602-0aa42-0tp0 cyber_vision_sensor_management_extension solid_edge_harness_design virtualized_infrastructure_manager 6bk1602-0aa12-0tp0_firmware crosswork_optimization_engine unified_computing_system solidfire_\&_hci_storage_node head-end_system_universal_device_integration_system mendix unified_communications_manager automated_subsea_tuning dna_center contact_center_domain_manager oncommand_insight energyip sppa-t3000_ses3000_firmware energy_engage firepower_4120 spectrum_power_4 firepower_2140 crosswork_network_controller e-car_operation_center finesse secure_device_onboard broadworks sentron_powermanager firepower_1140 network_services_orchestrator sd-wan_vmanage ucs_central fxos video_surveillance_operations_manager advanced_malware_protection_virtual_private_cloud_appliance solid_edge_cam_pro cloudcenter_suite_admin emergency_responder 6bk1602-0aa32-0tp0 snow_commander synchro siveillance_identity genomics_kernel_library 6bk1602-0aa22-0tp0_firmware cloudcenter mobility_services_engine virtualized_voice_browser firepower_4140 unity_connection log4j nx network_dashboard_fabric_controller unified_communications_manager_im_\&_presence_service iot_operations_dashboard firepower_4150 navigator crosswork_network_automation unified_intelligence_center fog_director firepower_1010 dna_spaces_connector data_center_network_manager desigo_cc_info_center firepower_4145 cyber_vision desigo_cc_advanced_reports xpedition_package_integrator capital crosswork_zero_touch_provisioning 6bk1602-0aa22-0tp0 integrated_management_controller_supervisor cloudcenter_suite firepower_2110 contact_center_management_portal synchro_4d dna_spaces video_surveillance_manager siveillance_viewpoint vesys workload_optimization_manager unified_contact_center_express ucs_director crosswork_platform_infrastructure cloud_manager unified_sip_proxy nexus_dashboard cloud_insights cloudcenter_cost_optimizer debian_linux brocade_san_navigator crosswork_data_gateway intersight_virtual_appliance snapcenter opcenter_intelligence dna_spaces\firepower_1120 firepower_threat_defense 6bk1602-0aa42-0tp0_firmware sipass_integrated prime_service_catalog business_process_automation common_services_platform_collector wan_automation_engine firepower_4110 cloudcenter_workload_manager gma-manager datacenter_manager connected_mobile_experiences firepower_9300 6bk1602-0aa52-0tp0 network_insights_for_data_center industrial_edge_management_hub Apache Log4j2 Log4j2

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CVE-2019-10953

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.5||HIGH

EPSS-3.67% / 88.48%

7 Day CHG~0.00%

Published-17 Apr, 2019 | 14:02

Updated-04 Jun, 2026 | 20:16

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.

Vendor-wago WAGO Siemens AG Schneider Electric SE ABB Phoenix Contact GmbH & Co. KG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2025-40802

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-2.3||LOW

EPSS-0.16% / 6.03%

7 Day CHG~0.00%

Published-09 Sep, 2025 | 08:48

Updated-03 Oct, 2025 | 19:37

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering once the activity stops.

Vendor-Siemens AG

Product-ruggedcom_rst2428p_firmware ruggedcom_rst2428p RUGGEDCOM RST2428P

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-41546

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.95% / 57.46%

7 Day CHG~0.00%

Published-12 Oct, 2021 | 09:49

Updated-04 Aug, 2024 | 03:15

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). Affected devices write crashdumps without checking if enough space is available on the filesystem. Once the crashdump fills the entire root filesystem, affected devices fail to boot successfully. An attacker can leverage this vulnerability to cause a permanent Denial-of-Service.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-3749

Matching Score-6

Assigner-Protect AI (formerly huntr.dev)

View Details

Matching Score-6

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-7.5||HIGH

EPSS-8.52% / 94.46%

7 Day CHG~0.00%

Published-31 Aug, 2021 | 10:36

Updated-03 Aug, 2024 | 17:09

Inefficient Regular Expression Complexity in axios/axios

axios is vulnerable to Inefficient Regular Expression Complexity

Vendor-axios axios Oracle Corporation Siemens AG

Product-sinec_ins goldengate axios axios/axios

CWE ID-CWE-1333

Inefficient Regular Expression Complexity

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-31340

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.99% / 58.80%

7 Day CHG~0.00%

Published-08 Jun, 2021 | 19:47

Updated-03 Aug, 2024 | 22:55

A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1 and < V1.3.2), SIMATIC RF188CI (All versions > V1.1 and < V1.3.2), SIMATIC RF360R (All versions < V2.0), SIMATIC Reader RF610R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF610R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF610R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF615R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF615R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF615R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF650R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF650R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF650R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF680R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF680R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF680R FCC (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ARIB (All versions > V3.0 < V4.0), SIMATIC Reader RF685R CMIIT (All versions > V3.0 < V4.0), SIMATIC Reader RF685R ETSI (All versions > V3.0 < V4.0), SIMATIC Reader RF685R FCC (All versions > V3.0 < V4.0). Affected devices do not properly handle large numbers of incoming connections. An attacker may leverage this to cause a Denial-of-Service situation.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-22883

Matching Score-6

Assigner-HackerOne

View Details

Matching Score-6

Assigner-HackerOne

CVSS Score-7.5||HIGH

EPSS-77.39% / 99.51%

7 Day CHG~0.00%

Published-03 Mar, 2021 | 17:38

Updated-30 Apr, 2025 | 22:24

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

Vendor-Node.js (OpenJS Foundation)Oracle Corporation NetApp, Inc.Siemens AG Fedora Project

Product-sinec_infrastructure_network_services peoplesoft_enterprise_peopletools graalvm e-series_performance_analyzer mysql_cluster nosql_database fedora jd_edwards_enterpriseone_tools node.js Node

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2020-7584

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.04% / 60.53%

7 Day CHG~0.00%

Published-14 Jul, 2020 | 13:18

Updated-04 Aug, 2024 | 09:33

A vulnerability has been identified in SIMATIC S7-200 SMART CPU family (All versions >= V2.2 < V2.5.1). Affected devices do not properly handle large numbers of new incomming connections and could crash under certain circumstances. An attacker may leverage this to cause a Denial-of-Service situation.

Vendor-Siemens AG

Product-simatic_s7-200_smart_sr_cpu simatic_s7-200_smart_sr_cpu_firmware simatic_s7-200_smart_st_cpu_firmware simatic_s7-200_smart_st_cpu SIMATIC S7-200 SMART CPU family

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2020-7587

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-2.48% / 82.91%

7 Day CHG~0.00%

Published-14 Jul, 2020 | 13:18

Updated-04 Aug, 2024 | 09:33

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-19281

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.64% / 73.84%

7 Day CHG~0.00%

Published-10 Mar, 2020 | 19:16

Updated-05 Aug, 2024 | 02:09

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2023-35921

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.87% / 54.91%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 09:07

Updated-13 Nov, 2024 | 14:28

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted Ethernet frames sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2020-15783

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.60% / 73.26%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 19:21

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-4837

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-2.66% / 84.13%

7 Day CHG~0.00%

Published-25 Jan, 2018 | 14:00

Updated-16 Sep, 2024 | 16:22

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-5391

Matching Score-6

Assigner-CERT/CC

View Details

Matching Score-6

Assigner-CERT/CC

CVSS Score-7.5||HIGH

EPSS-24.57% / 97.65%

7 Day CHG~0.00%

Published-06 Sep, 2018 | 21:00

Updated-05 Aug, 2024 | 05:33

The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Vendor-Debian GNU/Linux Red Hat, Inc.Canonical Ltd.F5, Inc.Siemens AG Linux Kernel Organization, Inc Microsoft Corporation

Product-ubuntu_linux big-ip_webaccelerator big-ip_application_acceleration_manager enterprise_linux_server_eus windows_8.1 big-ip_policy_enforcement_manager enterprise_linux_server_aus scalance_sc-600_firmware simatic_rf188_firmware ruggedcom_rm1224_firmware big-ip_local_traffic_manager simatic_net_cp_1243-7_lte_us windows_10 simatic_net_cp_1243-7_lte_us_firmware scalance_w700_ieee_802.11a\/b\/g\/n sinema_remote_connect_server enterprise_linux_workstation simatic_net_cp_1243-1 simatic_net_cp_1243-7_lte_eu_firmware simatic_rf185c_firmware scalance_s615_firmware simatic_net_cp_1543sp-1 enterprise_linux_desktop simatic_net_cp_1543-1 scalance_m-800_firmware simatic_net_cp_1242-7_firmware simatic_net_cp_1542sp-1_firmware big-ip_domain_name_system simatic_net_cp_1543sp-1_firmware scalance_w1700_ieee_802.11ac_firmware ruggedcom_rox_ii simatic_net_cp_1542sp-1 big-ip_edge_gateway debian_linux linux_kernel simatic_net_cp_1543-1_firmware scalance_sc-600 simatic_net_cp_1242-7 simatic_net_cp_1243-1_firmware windows_server_2008 simatic_net_cp_1542sp-1_irc_firmware enterprise_linux_server windows_server_2016 windows_server_2012 simatic_rf188 big-ip_fraud_protection_service ruggedcom_rox_ii_firmware scalance_w700_ieee_802.11a\/b\/g\/n_firmware simatic_rf186c_firmware simatic_net_cp_1542sp-1_irc big-ip_application_security_manager ruggedcom_rm1224 simatic_rf185c scalance_s615 simatic_rf186ci simatic_net_cp_1243-8_irc big-ip_access_policy_manager simatic_net_cp_1243-8_irc_firmware simatic_rf186ci_firmware simatic_rf188ci_firmware sinema_remote_connect_server_firmware windows_rt_8.1 big-ip_global_traffic_manager big-ip_analytics simatic_rf186c big-ip_link_controller scalance_w1700_ieee_802.11ac windows_7 scalance_m-800 enterprise_linux_server_tus big-ip_advanced_firewall_manager simatic_rf188ci simatic_net_cp_1243-7_lte_eu Kernel

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-20

Improper Input Validation

CVE-2018-13815

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.80% / 76.19%

7 Day CHG~0.00%

Published-13 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 09:14

A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.

Vendor-Siemens AG

Product-simatic_s7-1200_firmware simatic_s7-1200 simatic_s7-1500_firmware simatic_s7-1500 SIMATIC S7-1200, SIMATIC S7-1500

CWE ID-CWE-410

Insufficient Resource Pool

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2017-2681

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-0.91% / 56.12%

7 Day CHG~0.00%

Published-11 May, 2017 | 10:00

Updated-13 May, 2026 | 00:24

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2017-2680

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-1.15% / 63.52%

7 Day CHG~0.00%

Published-11 May, 2017 | 01:00

Updated-13 May, 2026 | 00:24

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2017-12741

Matching Score-6

Assigner-Siemens

View Details

Matching Score-6

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-3.31% / 87.28%

7 Day CHG~0.00%

Published-26 Dec, 2017 | 04:00

Updated-13 May, 2026 | 00:24

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-24040

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Affected

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs