ByteOS

Matching Score-10

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.58%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 19:21

Updated-04 Aug, 2024 | 13:22

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2023-52891

Matching Score-8

Assigner-Siemens

Product-SIMATIC Energy Manager Basic SIMIT V10 SIMATIC Energy Manager PRO SIMATIC IPC DiagMonitor SIMIT V11 SIMATIC IPC DiagBase simatic_energy_manager_basic simatic_ipc_diagbase simatic_energy_manager_pro simatic_ipc_diagmonitor simit_v10 simit_v11

Matching Score-8

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.12% / 31.03%

||

7 Day CHG~0.00%

Published-09 Jul, 2024 | 12:04

Updated-27 Aug, 2025 | 20:42

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.

Vendor-Siemens AG

CWE ID-CWE-1325

Improperly Controlled Sequential Memory Allocation

CVE-2024-27942

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.43% / 61.58%

||

7 Day CHG~0.00%

Published-14 May, 2024 | 10:02

Updated-06 Feb, 2025 | 18:15

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow any unauthenticated client to disconnect any active user from the server. An attacker could use this vulnerability to prevent any user to perform actions in the system, causing a denial of service situation.

Vendor-Siemens AG

Product-ruggedcom_crossbow RUGGEDCOM CROSSBOW ruggedcom_crossbow

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2018-4832

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.57% / 67.58%

||

7 Day CHG~0.00%

Published-24 Apr, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2022-47374

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.29% / 51.46%

||

7 Day CHG~0.00%

Published-12 Dec, 2023 | 11:25

Updated-03 Aug, 2024 | 14:55

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly. This could allow an attacker to exhaust system resources and create a denial of service condition for the device.

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2024-22041

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.20% / 42.65%

||

7 Day CHG~0.00%

Published-12 Mar, 2024 | 10:21

Updated-01 Aug, 2024 | 22:35

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems improperly handles memory buffers when parsing X.509 certificates. This could allow an unauthenticated remote attacker to crash the network service.

Vendor-Siemens AG

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-25032

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.09% / 26.20%

||

7 Day CHG~0.00%

Published-25 Mar, 2022 | 00:00

Updated-21 Aug, 2025 | 20:37

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-47375

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.30% / 53.03%

||

7 Day CHG~0.00%

Published-12 Dec, 2023 | 11:25

Updated-03 Aug, 2024 | 14:55

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.

CWE ID-CWE-805

Buffer Access with Incorrect Length Value

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-22044

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.30% / 52.62%

||

7 Day CHG~0.00%

Published-12 Mar, 2024 | 10:21

Updated-26 Aug, 2024 | 18:02

A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot.

Vendor-Siemens AG

Product-SENTRON 3KC ATC6 Expansion Module Ethernet sentron_3kc_act6

CWE ID-CWE-912

Hidden Functionality

CVE-2021-37185

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.43% / 79.84%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:16

Updated-18 Apr, 2025 | 18:33

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Vendor-Siemens AG

CWE ID-CWE-672

Operation on a Resource after Expiration or Release

CVE-2021-37735

Matching Score-8

Matching Score-8

CVSS Score-5.3||MEDIUM

EPSS-0.54% / 66.49%

||

7 Day CHG~0.00%

Published-12 Oct, 2021 | 15:14

Updated-04 Aug, 2024 | 01:30

A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba Instant 8.6.x.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

Vendor-n/a Siemens AG Aruba Networks

Product-aruba_instant scalance_w1750d_firmware scalance_w1750d HPE Aruba Instant (IAP)

CWE ID-CWE-134

Use of Externally-Controlled Format String

CVE-2021-37204

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.43% / 79.84%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:16

Updated-18 Apr, 2025 | 18:33

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.

Vendor-Siemens AG

CWE ID-CWE-672

Operation on a Resource after Expiration or Release

CVE-2021-37182

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.35% / 56.40%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:21

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

Vendor-Siemens AG

CWE ID-CWE-354

Improper Validation of Integrity Check Value

CVE-2021-37206

Matching Score-8

Assigner-Siemens

Product-siprotec_5_with_cpu_variant_cp300 siprotec_5_with_cpu_variant_cp100 siprotec_5_with_cpu_variant_cp050 SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.58% / 67.77%

||

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5219

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-3.64% / 87.38%

||

7 Day CHG~0.00%

Published-21 Jul, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2018-3658

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-5.3||MEDIUM

EPSS-1.13% / 77.41%

||

7 Day CHG~0.00%

Published-12 Sep, 2018 | 19:00

Updated-16 Sep, 2024 | 22:35

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2021-33737

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.56%

||

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-03 Aug, 2024 | 23:58

A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-34798

Matching Score-8

Assigner-Apache Software Foundation

Matching Score-8

Assigner-Apache Software Foundation

CVSS Score-7.5||HIGH

EPSS-10.97% / 93.14%

||

7 Day CHG~0.00%

Published-16 Sep, 2021 | 14:40

Updated-04 Aug, 2024 | 00:26

NULL pointer dereference in httpd core

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2020-28400

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.90% / 74.74%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:02

Updated-10 Dec, 2024 | 14:15

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.

Vendor-Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2023-51440

Matching Score-8

Assigner-Siemens

Product-siplus_net_cp_343-1_lean_firmware simatic_cp_343-1_lean simatic_cp_343-1 simatic_cp_343-1_lean_firmware siplus_net_cp_343-1_lean siplus_net_cp_343-1_firmware simatic_cp_343-1_firmware siplus_net_cp_343-1 SIPLUS NET CP 343-1 SIMATIC CP 343-1 SIPLUS NET CP 343-1 Lean SIMATIC CP 343-1 Lean

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.34% / 55.95%

||

7 Day CHG~0.00%

Published-13 Feb, 2024 | 09:00

Updated-16 Dec, 2024 | 15:17

A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All versions), SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0) (All versions), SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0) (All versions). Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets.

Vendor-Siemens AG

CWE ID-CWE-940

Improper Verification of Source of a Communication Channel

CVE-2023-49252

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.23% / 46.05%

||

7 Day CHG~0.00%

Published-09 Jan, 2024 | 10:00

Updated-17 Jun, 2025 | 20:39

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition.

Vendor-Siemens AG

Product-simatic_cn_4100 SIMATIC CN 4100

CWE ID-CWE-20

Improper Input Validation

CVE-2025-41222

Matching Score-8

Assigner-Siemens

Product-RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM RS910W RUGGEDCOM RSG2288 V4.X RUGGEDCOM M2100 RUGGEDCOM RSG2288 V5.X RUGGEDCOM RS400 RUGGEDCOM RS8000 RUGGEDCOM RS1600T RUGGEDCOM RSG910C RUGGEDCOM RS8000H RUGGEDCOM RST916C RUGGEDCOM i800 RUGGEDCOM RS900L RUGGEDCOM RST916P RUGGEDCOM RSG920P V4.X RUGGEDCOM RS900M-GETS-C01 RUGGEDCOM RSG2200 RUGGEDCOM RS930W RUGGEDCOM RMC8388 V5.X RUGGEDCOM i802 RUGGEDCOM RP110 RUGGEDCOM RS416P RUGGEDCOM M969 RUGGEDCOM RSG909R RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RS920L RUGGEDCOM i803 RUGGEDCOM RSG2300 V4.X RUGGEDCOM RMC8388 V4.X RUGGEDCOM RSG2100P (32M) V5.X RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RS900M-GETS-XX RUGGEDCOM RS910L RUGGEDCOM RS1600F RUGGEDCOM RS416v2 V4.X RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM RST2228P RUGGEDCOM RSG2300P V4.X RUGGEDCOM RS1600 RUGGEDCOM RSG920P V5.X RUGGEDCOM RS900W RUGGEDCOM M2200 RUGGEDCOM RS8000T RUGGEDCOM i801 RUGGEDCOM RS930L RUGGEDCOM RSG2100 RUGGEDCOM RS900G RUGGEDCOM RS900GP RUGGEDCOM RSG2488 V4.X RUGGEDCOM RSL910 RUGGEDCOM RS940G RUGGEDCOM RST2228 RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RS900 RUGGEDCOM RS416 RUGGEDCOM RS900M-STND-C01 RUGGEDCOM RS900M-STND-XX RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS910 RUGGEDCOM RSG908C RUGGEDCOM RMC30 RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RSG2300P V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS969 RUGGEDCOM RSG907R RUGGEDCOM RSG2488 V5.X RUGGEDCOM RS8000A RUGGEDCOM RS920W RUGGEDCOM RSG2100P RUGGEDCOM RS401

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.06% / 17.17%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 10:35

Updated-08 Jul, 2025 | 16:18

A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All versions), RUGGEDCOM M2100 (All versions), RUGGEDCOM M2200 (All versions), RUGGEDCOM M969 (All versions), RUGGEDCOM RMC30 (All versions), RUGGEDCOM RMC8388 V4.X (All versions), RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RP110 (All versions), RUGGEDCOM RS1600 (All versions), RUGGEDCOM RS1600F (All versions), RUGGEDCOM RS1600T (All versions), RUGGEDCOM RS400 (All versions), RUGGEDCOM RS401 (All versions), RUGGEDCOM RS416 (All versions), RUGGEDCOM RS416P (All versions), RUGGEDCOM RS416Pv2 V4.X (All versions), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V4.X (All versions), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS8000 (All versions), RUGGEDCOM RS8000A (All versions), RUGGEDCOM RS8000H (All versions), RUGGEDCOM RS8000T (All versions), RUGGEDCOM RS900 (All versions), RUGGEDCOM RS900 (32M) V4.X (All versions), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (All versions), RUGGEDCOM RS900G (32M) V4.X (All versions), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GP (All versions), RUGGEDCOM RS900L (All versions), RUGGEDCOM RS900M-GETS-C01 (All versions), RUGGEDCOM RS900M-GETS-XX (All versions), RUGGEDCOM RS900M-STND-C01 (All versions), RUGGEDCOM RS900M-STND-XX (All versions), RUGGEDCOM RS900W (All versions), RUGGEDCOM RS910 (All versions), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910W (All versions), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920W (All versions), RUGGEDCOM RS930L (All versions), RUGGEDCOM RS930W (All versions), RUGGEDCOM RS940G (All versions), RUGGEDCOM RS969 (All versions), RUGGEDCOM RSG2100 (All versions), RUGGEDCOM RSG2100 (32M) V4.X (All versions), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (All versions), RUGGEDCOM RSG2100P (32M) V4.X (All versions), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2200 (All versions), RUGGEDCOM RSG2288 V4.X (All versions), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V4.X (All versions), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V4.X (All versions), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V4.X (All versions), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V4.X (All versions), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). Affected devices do not properly handle malformed TLS handshake messages. This could allow an attacker with network access to the webserver to cause a denial of service resulting in the web server and the device to crash.

Vendor-Siemens AG

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2025-40575

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 27.78%

||

7 Day CHG~0.00%

Published-13 May, 2025 | 09:38

Updated-08 Jul, 2025 | 11:15

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.

Vendor-Siemens AG

Product-scalance_lpe9403 scalance_lpe9403_firmware SCALANCE LPE9403

CWE ID-CWE-457

Use of Uninitialized Variable

CVE-2021-31882

Matching Score-8

Assigner-Siemens

Product-nucleus_readystart_v3 talon_tc_compact nucleus_net talon_tc_compact_firmware apogee_pxc_compact apogee_modular_equiment_controller_firmware apogee_pxc_compact_firmware apogee_modular_equiment_controller apogee_modular_building_controller capital_vstar apogee_pxc_modular_firmware apogee_pxc_modular talon_tc_modular_firmware talon_tc_modular apogee_modular_building_controller_firmware nucleus_source_code Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11

Matching Score-8

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-1.41% / 79.74%

||

7 Day CHG~0.00%

Published-09 Nov, 2021 | 11:31

Updated-11 Mar, 2025 | 09:47

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP client application does not validate the length of the Domain Name Server IP option(s) (0x06) when processing DHCP ACK packets. This may lead to Denial-of-Service conditions. (FSMD-2021-0011)

Vendor-Siemens AG

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-31883

Matching Score-8

Assigner-Siemens

Product-nucleus_readystart_v3 talon_tc_compact nucleus_net talon_tc_compact_firmware apogee_pxc_compact apogee_modular_equiment_controller_firmware apogee_pxc_compact_firmware apogee_modular_equiment_controller apogee_modular_building_controller capital_vstar apogee_pxc_modular_firmware apogee_pxc_modular talon_tc_modular_firmware talon_tc_modular apogee_modular_building_controller_firmware nucleus_source_code Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11

Matching Score-8

Assigner-Siemens

CVSS Score-7.1||HIGH

EPSS-1.41% / 79.74%

||

7 Day CHG~0.00%

Published-09 Nov, 2021 | 11:31

Updated-11 Mar, 2025 | 09:47

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor option(s), leading to Denial-of-Service conditions. (FSMD-2021-0013)

Vendor-Siemens AG

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-31401

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.71% / 71.38%

||

7 Day CHG~0.00%

Published-19 Aug, 2021 | 11:25

Updated-03 Aug, 2024 | 22:55

An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.

Vendor-hcc-embedded n/a Siemens AG

Product-sentron_3wa_com190_firmware sentron_3wl_com35_firmware sentron_3wa_com190 sentron_3wl_com35 nichestack n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2023-46156

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.04% / 10.90%

||

7 Day CHG~0.00%

Published-12 Dec, 2023 | 11:27

Updated-10 Sep, 2024 | 09:36

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

Vendor-Siemens AG

CWE ID-CWE-416

Use After Free

CVE-2023-46283

Matching Score-8

Assigner-Siemens

Product-sinumerik_integrate_runmyhmi_\/automotive opcenter_quality simatic_pcs_neo totally_integrated_automation_portal SIMATIC PCS neo Totally Integrated Automation Portal (TIA Portal) V18 Opcenter Execution Foundation Opcenter Quality Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V16 Totally Integrated Automation Portal (TIA Portal) V14 Totally Integrated Automation Portal (TIA Portal) V15.1 SINEC NMS

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.22% / 44.17%

||

7 Day CHG~0.00%

Published-12 Dec, 2023 | 11:27

Updated-14 Jan, 2025 | 10:29

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer when handling specific requests on port 4002/tcp. This could allow an attacker to crash the application. The corresponding service is auto-restarted after the crash.

Vendor-Siemens AG

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-13871

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-2.19% / 83.69%

||

7 Day CHG~0.00%

Published-06 Jun, 2020 | 15:37

Updated-04 Aug, 2024 | 12:32

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CWE ID-CWE-416

Use After Free

CVE-2018-16556

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.90%

||

7 Day CHG~0.00%

Published-13 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 10:24

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Specially crafted packets sent to port 102/tcp via Ethernet interface, via PROFIBUS, or via Multi Point Interfaces (MPI) could cause the affected devices to go into defect mode. Manual reboot is required to resume normal operation. Successful exploitation requires an attacker to be able to send specially crafted packets to port 102/tcp via Ethernet interface, via PROFIBUS or Multi Point Interfaces (MPI). No user interaction and no user privileges are required to exploit the security vulnerability. The vulnerability could allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of the system.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2021-27290

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-2.67% / 85.20%

||

7 Day CHG~0.00%

Published-12 Mar, 2021 | 21:47

Updated-03 Aug, 2024 | 20:48

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

Vendor-ssri_project n/a Oracle Corporation Siemens AG

Product-sinec_infrastructure_network_services ssri graalvm n/a

CVE-2021-27383

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.44% / 62.11%

||

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-03 Aug, 2024 | 20:48

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-25664

Matching Score-8

Assigner-Siemens

Product-nucleus_readystart_v3 nucleus_readystart_v4 capital_vstar nucleus_net nucleus_source_code Nucleus Source Code Nucleus NET Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 Nucleus ReadyStart V4 Nucleus ReadyStart V3

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.52% / 65.94%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-11 Mar, 2025 | 10:15

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.

Vendor-Siemens AG

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2021-25143

Matching Score-8

Matching Score-8

CVSS Score-7.5||HIGH

EPSS-0.67% / 70.31%

||

7 Day CHG~0.00%

Published-29 Mar, 2021 | 19:03

Updated-03 Aug, 2024 | 19:56

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Vendor-n/a Siemens AG Aruba Networks

Product-scalance_w1750d_firmware instant scalance_w1750d Aruba Instant Access Points

CVE-2021-25215

Matching Score-8

Matching Score-8

CVSS Score-7.5||HIGH

EPSS-1.68% / 81.42%

||

7 Day CHG+0.04%

Published-29 Apr, 2021 | 00:55

Updated-16 Sep, 2024 | 22:02

An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.

CWE ID-CWE-617

Reachable Assertion

CVE-2023-39269

Matching Score-8

Assigner-Siemens

Product-ruggedcom_rsg2488nc ruggedcom_rs969 ruggedcom_rsg2100_\(32m\)ruggedcom_rsg2100 ruggedcom_rsg2300p ruggedcom_rsg910c ruggedcom_rs416 ruggedcom_rs900_\(32m\)ruggedcom_i802nc ruggedcom_m969f ruggedcom_ros ruggedcom_m2100 ruggedcom_rs910lnc ruggedcom_rsg2300f ruggedcom_rs900mnc-stnd-xx ruggedcom_rs930w ruggedcom_rmc8388 ruggedcom_rsg2200 ruggedcom_rsg2300nc ruggedcom_rs969nc ruggedcom_rsl910nc ruggedcom_m2200f ruggedcom_rs1600 ruggedcom_rs910l ruggedcom_rsg2288nc ruggedcom_rs900m-stnd-c01 ruggedcom_m969 ruggedcom_rs900g_\(32m\)ruggedcom_rsg2200nc ruggedcom_rs900m-stnd-xx ruggedcom_rsg2100nc\(32m\)ruggedcom_m969nc ruggedcom_i801nc ruggedcom_rs900nc\(32m\)ruggedcom_rsg2300pf ruggedcom_m2100f ruggedcom_rsg2488f ruggedcom_rsl910 ruggedcom_rs900l ruggedcom_rs401nc ruggedcom_rs900lnc ruggedcom_rs900m-gets-c01 ruggedcom_rs900nc ruggedcom_rs900mnc-gets-c01 ruggedcom_rs920w ruggedcom_rs8000a ruggedcom_rs416v2 ruggedcom_rst916c ruggedcom_rsg2300 ruggedcom_rs8000anc ruggedcom_rst2228p ruggedcom_rs8000nc ruggedcom_rsg908c ruggedcom_i803 ruggedcom_rmc30nc ruggedcom_rs930lnc ruggedcom_rsg2488 ruggedcom_rs900g ruggedcom_rs416pnc_v2 ruggedcom_rs8000tnc ruggedcom_rsg2288 ruggedcom_rs900gf ruggedcom_rs940g ruggedcom_rsg920pnc ruggedcom_rsg2100f ruggedcom_rmc8388nc ruggedcom_rs910 ruggedcom_rs930l ruggedcom_rsg907r ruggedcom_rs1600tnc ruggedcom_rs900gpnc ruggedcom_rs8000hnc ruggedcom_rs900w ruggedcom_rp110nc ruggedcom_rs900gnc ruggedcom_rsg2100pnc ruggedcom_i801 ruggedcom_rs940gnc ruggedcom_rs416pnc ruggedcom_rsg2100pf ruggedcom_rs416nc ruggedcom_i800 ruggedcom_rs900mnc-gets-xx ruggedcom_rs940gf ruggedcom_rst2228 ruggedcom_i800nc ruggedcom_rsg909r ruggedcom_rs1600t ruggedcom_rs401 ruggedcom_rs900 ruggedcom_rs8000t ruggedcom_rs416pv2 ruggedcom_rs416f ruggedcom_rp110 ruggedcom_rs920lnc ruggedcom_i803nc ruggedcom_i802 ruggedcom_rs910w ruggedcom_m2200nc ruggedcom_rsg2100p ruggedcom_rs900gpf ruggedcom_rs8000 ruggedcom_rst916p ruggedcom_rs900f ruggedcom_rsg2200f ruggedcom_rs1600nc ruggedcom_rsg2100nc ruggedcom_rs900gp ruggedcom_rs900mnc-stnd-xx-c01 ruggedcom_rsg920p ruggedcom_rs416p ruggedcom_rs900m-gets-xx ruggedcom_m2100nc ruggedcom_rs1600f ruggedcom_m2200 ruggedcom_rs416nc_v2 ruggedcom_rs400 ruggedcom_rs8000h ruggedcom_rs1600fnc ruggedcom_rs416pf ruggedcom_rs400f ruggedcom_rsg2300pnc ruggedcom_rs920l ruggedcom_rs910nc ruggedcom_rs900gnc\(32m\)ruggedcom_rs400nc ruggedcom_rmc30 RUGGEDCOM RS8000 RUGGEDCOM RS900L RUGGEDCOM RSG2300 V4.X RUGGEDCOM RS900MNC-STND-XX-C01 RUGGEDCOM RSG920P V4.X RUGGEDCOM RS401NC RUGGEDCOM RSG2100PNC (32M) V4.X RUGGEDCOM RS920LNC RUGGEDCOM RS910L RUGGEDCOM RS930W RUGGEDCOM RSG2100NC(32M) V5.X RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RSG2288NC V5.X RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RS1600 RUGGEDCOM i801NC RUGGEDCOM RS940G RUGGEDCOM RSG2100NC(32M) V4.X RUGGEDCOM i800NC RUGGEDCOM RS910 RUGGEDCOM RSG908C RUGGEDCOM RS8000NC RUGGEDCOM RS400F RUGGEDCOM RS900NC(32M) V4.X RUGGEDCOM RS920L RUGGEDCOM RMC8388 V4.X RUGGEDCOM RS8000H RUGGEDCOM RS900LNC RUGGEDCOM RS8000T RUGGEDCOM RS910NC RUGGEDCOM RS416PF RUGGEDCOM RS900G RUGGEDCOM M2100F RUGGEDCOM RS900M-STND-XX RUGGEDCOM RS900W RUGGEDCOM RMC8388 V5.X RUGGEDCOM RS900MNC-STND-XX RUGGEDCOM RSG2100PNC (32M) V5.X RUGGEDCOM RSG910C RUGGEDCOM RSG2300PF RUGGEDCOM RSG2288 V4.X RUGGEDCOM RS1600NC RUGGEDCOM RS969 RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM RSG909R RUGGEDCOM RS416F RUGGEDCOM RS900GPF RUGGEDCOM RSG2100P RUGGEDCOM RS930LNC RUGGEDCOM RS416P RUGGEDCOM RSG920P V5.X RUGGEDCOM RSG2200NC RUGGEDCOM RS8000HNC RUGGEDCOM RSG2300PNC V5.X RUGGEDCOM RSG2288 V5.X RUGGEDCOM RS1600F RUGGEDCOM RS416NC RUGGEDCOM RS930L RUGGEDCOM RSG907R RUGGEDCOM RSG2300P V5.X RUGGEDCOM RS910W RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS940GNC RUGGEDCOM RS900GNC RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RMC8388NC V5.X RUGGEDCOM RS940GF RUGGEDCOM RS910LNC RUGGEDCOM RSG2288NC V4.X RUGGEDCOM RSG2488 V5.X RUGGEDCOM RMC30 RUGGEDCOM RS900GF RUGGEDCOM RS8000ANC RUGGEDCOM RMC8388NC V4.X RUGGEDCOM RS1600T RUGGEDCOM M969F RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RS400NC RUGGEDCOM RS900MNC-GETS-C01 RUGGEDCOM RS900M-GETS-C01 RUGGEDCOM RSG2488NC V4.X RUGGEDCOM M2200F RUGGEDCOM RP110 RUGGEDCOM i801 RUGGEDCOM RS416v2 V4.X RUGGEDCOM RS416NCv2 V4.X RUGGEDCOM RS8000TNC RUGGEDCOM RSG2300P V4.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS920W RUGGEDCOM RS900F RUGGEDCOM M2200 RUGGEDCOM RS900MNC-GETS-XX RUGGEDCOM RSG2300NC V5.X RUGGEDCOM RS900GNC(32M) V4.X RUGGEDCOM RS900 RUGGEDCOM RSG2100 RUGGEDCOM M969NC RUGGEDCOM RS416PNC RUGGEDCOM RS1600FNC RUGGEDCOM RS400 RUGGEDCOM RS900NC(32M) V5.X RUGGEDCOM RS1600TNC RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM M969 RUGGEDCOM RS416PNCv2 V4.X RUGGEDCOM M2200NC RUGGEDCOM RS8000A RUGGEDCOM i803 RUGGEDCOM RSG2100PNC RUGGEDCOM RSG920PNC V5.X RUGGEDCOM RSG2100NC RUGGEDCOM RSG2488F RUGGEDCOM RP110NC RUGGEDCOM RSG2200 RUGGEDCOM RSG2488NC V5.X RUGGEDCOM RSL910NC RUGGEDCOM RS969NC RUGGEDCOM RS416 RUGGEDCOM RST2228P RUGGEDCOM i800 RUGGEDCOM RS900M-STND-C01 RUGGEDCOM RS900M-GETS-XX RUGGEDCOM RST916P RUGGEDCOM RS416PNCv2 V5.X RUGGEDCOM RS416NCv2 V5.X RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RSL910 RUGGEDCOM RSG2100PF RUGGEDCOM RS900GP RUGGEDCOM RST916C RUGGEDCOM RS900GPNC RUGGEDCOM RSG2100F RUGGEDCOM RSG2488 V4.X RUGGEDCOM i802 RUGGEDCOM RS900GNC(32M) V5.X RUGGEDCOM RST2228 RUGGEDCOM RS401 RUGGEDCOM RSG2300NC V4.X RUGGEDCOM RSG920PNC V4.X RUGGEDCOM i802NC RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM RSG2300F RUGGEDCOM RSG2300PNC V4.X RUGGEDCOM RS900NC RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RMC30NC RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RSG2200F RUGGEDCOM M2100NC RUGGEDCOM RSG2100P (32M) V5.X

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.22% / 45.02%

||

7 Day CHG+0.01%

Published-08 Aug, 2023 | 09:20

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The web server of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause total loss of availability of the web server, which might recover after the attack is over.

Vendor-Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-25219

Matching Score-8

Matching Score-8

CVSS Score-5.3||MEDIUM

EPSS-0.52% / 65.77%

||

7 Day CHG~0.00%

Published-27 Oct, 2021 | 21:10

Updated-16 Sep, 2024 | 17:33

Lame cache can be abused to severely degrade resolver performance

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

CVE-2021-25676

Matching Score-8

Assigner-Siemens

Product-scalance_s615 scalance_m-800_firmware scalance_sc-600 scalance_sc-600_firmware ruggedcom_rm1224_firmware scalance_m-800 scalance_s615_firmware ruggedcom_rm1224 SCALANCE M-800 RUGGEDCOM RM1224 SCALANCE S615 SCALANCE SC-600

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.34%

||

7 Day CHG~0.00%

Published-15 Mar, 2021 | 17:03

Updated-03 Aug, 2024 | 20:11

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

Vendor-Siemens AG

CWE ID-CWE-307

Improper Restriction of Excessive Authentication Attempts

CVE-2021-25661

Matching Score-8

Assigner-Siemens

Product-simatic_hmi_comfort_panels_22\"simatic_hmi_ktp_mobile_panels_ktp700f simatic_hmi_ktp_mobile_panels_ktp900_firmware simatic_hmi_ktp_mobile_panels_ktp900f simatic_hmi_ktp_mobile_panels_ktp400f simatic_hmi_comfort_outdoor_panels_7\"simatic_hmi_ktp_mobile_panels_ktp700 simatic_hmi_ktp_mobile_panels_ktp700f_firmware simatic_hmi_comfort_outdoor_panels_15\"_firmware simatic_hmi_ktp_mobile_panels_ktp900f_firmware simatic_hmi_ktp_mobile_panels_ktp400f_firmware simatic_hmi_comfort_panels_4\"simatic_hmi_comfort_panels_4\"_firmware simatic_hmi_ktp_mobile_panels_ktp900 simatic_hmi_comfort_outdoor_panels_15\"simatic_hmi_comfort_outdoor_panels_7\"_firmware simatic_hmi_comfort_panels_22\"_firmware simatic_wincc_runtime_advanced simatic_hmi_ktp_mobile_panels_ktp700_firmware SIMATIC WinCC Runtime Advanced V16 SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.37% / 58.04%

||

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-03 Aug, 2024 | 20:11

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the client side when sending data from the server, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CVE-2021-25660

Matching Score-8

Assigner-Siemens

Product-simatic_hmi_comfort_panels_22\"simatic_hmi_ktp_mobile_panels_ktp700f simatic_hmi_ktp_mobile_panels_ktp900_firmware simatic_hmi_ktp_mobile_panels_ktp900f simatic_hmi_ktp_mobile_panels_ktp400f simatic_hmi_comfort_outdoor_panels_7\"simatic_hmi_ktp_mobile_panels_ktp700 simatic_hmi_ktp_mobile_panels_ktp700f_firmware simatic_hmi_comfort_outdoor_panels_15\"_firmware simatic_hmi_ktp_mobile_panels_ktp900f_firmware simatic_hmi_ktp_mobile_panels_ktp400f_firmware simatic_hmi_comfort_panels_4\"simatic_hmi_comfort_panels_4\"_firmware simatic_hmi_ktp_mobile_panels_ktp900 simatic_hmi_comfort_outdoor_panels_15\"simatic_hmi_comfort_outdoor_panels_7\"_firmware simatic_hmi_comfort_panels_22\"_firmware simatic_wincc_runtime_advanced simatic_hmi_ktp_mobile_panels_ktp700_firmware SIMATIC WinCC Runtime Advanced V16 SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants)SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.46% / 62.98%

||

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-03 Aug, 2024 | 20:11

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the server side when sending data from the client, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-30175

Matching Score-8

Assigner-Siemens

Product-Totally Integrated Automation Portal (TIA Portal) V19 SIMATIC PCS neo V4.1 Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V20 SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 SINEMA Remote Connect SIMATIC PCS neo V5.0 User Management Component (UMC)

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.08% / 23.55%

||

7 Day CHG~0.00%

Published-13 May, 2025 | 09:38

Updated-08 Jul, 2025 | 11:15

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound write buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

Vendor-Siemens AG

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-25663

Matching Score-8

Assigner-Siemens

Product-nucleus_net capital_vstar nucleus_readystart nucleus_source_code Nucleus Source Code Nucleus NET Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 Nucleus ReadyStart V4 Nucleus ReadyStart V3

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.52% / 65.94%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-11 Mar, 2025 | 10:15

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.

Vendor-Siemens AG

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2025-24811

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.08% / 24.21%

||

7 Day CHG~0.00%

Published-11 Feb, 2025 | 10:29

Updated-12 Feb, 2025 | 20:51

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). Affected devices do not process correctly certain special crafted packets sent to port 80/tcp, which could allow an unauthenticated attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-404

Improper Resource Shutdown or Release

CVE-2021-22926

Matching Score-8

Assigner-HackerOne

Matching Score-8

Assigner-HackerOne

CVSS Score-7.5||HIGH

EPSS-0.77% / 72.47%

||

7 Day CHG~0.00%

Published-05 Aug, 2021 | 00:00

Updated-03 Aug, 2024 | 18:58

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file, it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`), a malicious user can create a file name with the same name as the app wants to use by name, and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.

CWE ID-CWE-840

Not Available

CWE ID-CWE-295

Improper Certificate Validation

CVE-2021-23362

Matching Score-8

Assigner-Snyk

Matching Score-8

Assigner-Snyk

CVSS Score-5.3||MEDIUM

EPSS-0.55% / 67.06%

||

7 Day CHG+0.16%

Published-23 Mar, 2021 | 16:20

Updated-17 Sep, 2024 | 03:02

Regular Expression Denial of Service (ReDoS)

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

Vendor-npmjs n/a Siemens AG

Product-sinec_infrastructure_network_services hosted-git-info hosted-git-info

CWE ID-CWE-1333

Inefficient Regular Expression Complexity

CVE-2022-43716

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.21% / 42.75%

||

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:02

Updated-10 Sep, 2024 | 10:15

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected product.

Vendor-Siemens AG

CWE ID-CWE-416

Use After Free

CVE-2022-43767

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.21% / 43.39%

||

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:02

Updated-10 Sep, 2024 | 10:15

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Vendor-Siemens AG

CWE ID-CWE-833

Deadlock

CVE-2022-36362

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.06%

||

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-08 Oct, 2024 | 09:15

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recovered by power cycling the device.

CWE ID-CWE-20

Improper Input Validation

CVE-2020-9327

Matching Score-8

Assigner-MITRE Corporation

Product-sinec_infrastructure_network_services ubuntu_linux communications_messaging_server cloud_backup sqlite communications_network_charging_and_control zfs_storage_appliance_kit outside_in_technology hyperion_infrastructure_technology enterprise_manager_ops_center mysql_workbench n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.40% / 79.64%

||

7 Day CHG~0.00%

Published-21 Feb, 2020 | 21:25

Updated-04 Aug, 2024 | 10:26

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Vendor-sqlite n/a NetApp, Inc.Oracle Corporation Canonical Ltd.Siemens AG

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2022-40227

Matching Score-8

Assigner-Siemens