Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

siemens simatic s7-1500 software controller - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
NA
CVE-2022-30694
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote malicious users to track the activities of other users via a login cross-site request forgery attack.
Siemens Simatic Wincc Runtime -Siemens Simatic S7-1500 Software Controller -Siemens Simatic S7-plcsim Advanced -Siemens 6es7154-8fb01-0ab0 FirmwareSiemens 6es7154-8ab01-0ab0 FirmwareSiemens 6es7154-8fx00-0ab0 FirmwareSiemens 6es7151-8ab01-0ab0 FirmwareSiemens 6es7151-8fb01-0ab0 FirmwareSiemens 6es7314-6eh04-0ab0 FirmwareSiemens 6es7315-2eh14-0ab0 FirmwareSiemens 6es7315-2fj14-0ab0 FirmwareSiemens 6es7315-7tj10-0ab0 FirmwareSiemens 6es7317-2ek14-0ab0 FirmwareSiemens 6es7317-2fk14-0ab0 FirmwareSiemens 6es7317-7tk10-0ab0 FirmwareSiemens 6es7317-7ul10-0ab0 FirmwareSiemens 6es7318-3el01-0ab0 FirmwareSiemens 6es7318-3fl01-0ab0 FirmwareSiemens 6ag1151-8ab01-7ab0 FirmwareSiemens 6ag1151-8fb01-2ab0 FirmwareSiemens 6ag1314-6eh04-7ab0 FirmwareSiemens 6ag1315-2eh14-7ab0 Firmware
NA
CVE-2022-38465
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21...
Siemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc2 FirmwareSiemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc FirmwareSiemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1510sp FirmwareSiemens Simatic S7-1500 Cpu 1511-1 FirmwareSiemens Simatic S7-1500 Cpu 151511c-1 FirmwareSiemens Simatic S7-1500 Cpu 151511f-1 FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 FirmwareSiemens Simatic S7-1500 Cpu 1512c-1 FirmwareSiemens Simatic S7-1500 Cpu 1512sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1512spf-1 Firmware
5
CVSSv2
CVE-2018-25032
zlib prior to 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Zlib ZlibDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Apple Mac Os XApple Mac Os X 10.15.7Apple MacosPython PythonMariadb MariadbNetapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -Netapp Management Services For Element Software -Netapp E-series Santricity Os ControllerNetapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -
7.1
CVSSv2
CVE-2021-37185
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All...
Siemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 FirmwareSiemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-plcsim Advanced Firmware 4.0Siemens Tim 1531 Irc FirmwareSiemens Simatic S7-1500 Software ControllerSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1510sp FirmwareSiemens Simatic S7-1500 Cpu 1511-1 FirmwareSiemens Simatic S7-1500 Cpu 1511c-1 FirmwareSiemens Simatic S7-1500 Cpu 1511f-1 FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 Firmware
7.1
CVSSv2
CVE-2021-37204
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open...
Siemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 FirmwareSiemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-plcsim Advanced Firmware 4.0Siemens Tim 1531 Irc FirmwareSiemens Simatic S7-1500 Software ControllerSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1510sp FirmwareSiemens Simatic S7-1500 Cpu 1511-1 FirmwareSiemens Simatic S7-1500 Cpu 1511c-1 FirmwareSiemens Simatic S7-1500 Cpu 1511f-1 FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 Firmware
7.1
CVSSv2
CVE-2021-37205
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All...
Siemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 FirmwareSiemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-plcsim Advanced Firmware 4.0Siemens Tim 1531 Irc FirmwareSiemens Simatic S7-1500 Software ControllerSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1510sp FirmwareSiemens Simatic S7-1500 Cpu 1511-1 FirmwareSiemens Simatic S7-1500 Cpu 1511c-1 FirmwareSiemens Simatic S7-1500 Cpu 1511f-1 FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 Firmware
6.8
CVSSv2
CVE-2021-46143
In doProlog in xmlparse.c in Expat (aka libexpat) prior to 2.4.3, an integer overflow exists for m_groupSize.
Libexpat Project LibexpatNetapp Oncommand Workflow Automation -Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615cTenable NessusSiemens Sinema Remote Connect Server
9
CVSSv2
CVE-2021-45960
In Expat (aka libexpat) prior to 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect ServerNetapp Oncommand Workflow Automation -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615c
5
CVSSv2
CVE-2020-28397
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU fam...
Siemens Cpu 1504d Tf FirmwareSiemens Cpu 1507d Tf FirmwareSiemens Cpu 1515sp Pc2 Tf FirmwareSiemens Simatic S7 Plcsim Advanced FirmwareSiemens Simatic S7-1500 Software ControllerSiemens Tim 1531 Irc Firmware 2.1Siemens Cpu 1211c Firmware 4.4Siemens Cpu 1212c Firmware 4.4Siemens Cpu 1212fc Firmware 4.4Siemens Cpu 1214fc Firmware 4.4Siemens Cpu 1214c Firmware 4.4Siemens Cpu 1215fc Firmware 4.4Siemens Cpu 1215c Firmware 4.4Siemens Cpu 1217c Firmware 4.4Siemens Siplus Cpu 1510sp F-1pn FirmwareSiemens Siplus Cpu 1511-1 Pn FirmwareSiemens Siplus Cpu 1511f-1 Pn FirmwareSiemens Siplus Cpu 1512sp-1 Pn FirmwareSiemens Siplus Cpu 1512sp F-1pn FirmwareSiemens Siplus Cpu 1513-1 Pn FirmwareSiemens Siplus Cpu 1513f-1 Pn FirmwareSiemens Siplus Cpu 1516-3 Pn\\/dp Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook