Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

siemens sinumerik one firmware - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2023-46156

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an malicious user to create a denial of service condition. A restart is needed to restore normal operations.
Siemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic Et 200sp Open Control 1515sp Pc2 FirmwareSiemens Simatic S7-1500 Cpu 1510sp F-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1511-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1511c-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1511f-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1512c-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1512sp F-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1512sp-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1513-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1513f-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1513r-1 Pn FirmwareSiemens Simatic S7-1500 Cpu 1514sp F-2 Pn FirmwareSiemens Simatic S7-1500 Cpu 1514sp-2 Pn FirmwareSiemens Simatic S7-1500 Cpu 1514spt F-2 Pn FirmwareSiemens Simatic S7-1500 Cpu 1514spt-2 Pn FirmwareSiemens Simatic S7-1500 Cpu 1515-2 Pn FirmwareSiemens Simatic S7-1500 Cpu 1515f-2 Pn Firmware
6.5
CVSSv3

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote malicious users to track the activities of other users via a login cross-site request forgery attack.
Siemens Simatic Wincc Runtime -Siemens Simatic S7-1500 Software Controller -Siemens Simatic S7-plcsim Advanced -Siemens 6es7154-8fb01-0ab0 FirmwareSiemens 6es7154-8ab01-0ab0 FirmwareSiemens 6es7154-8fx00-0ab0 FirmwareSiemens 6es7151-8ab01-0ab0 FirmwareSiemens 6es7151-8fb01-0ab0 FirmwareSiemens 6es7314-6eh04-0ab0 FirmwareSiemens 6es7315-2eh14-0ab0 FirmwareSiemens 6es7315-2fj14-0ab0 FirmwareSiemens 6es7315-7tj10-0ab0 FirmwareSiemens 6es7317-2ek14-0ab0 FirmwareSiemens 6es7317-2fk14-0ab0 FirmwareSiemens 6es7317-7tk10-0ab0 FirmwareSiemens 6es7317-7ul10-0ab0 FirmwareSiemens 6es7318-3el01-0ab0 FirmwareSiemens 6es7318-3fl01-0ab0 FirmwareSiemens 6ag1151-8ab01-7ab0 FirmwareSiemens 6ag1151-8fb01-2ab0 FirmwareSiemens 6ag1314-6eh04-7ab0 FirmwareSiemens 6ag1315-2eh14-7ab0 Firmware
7.8
CVSSv3

CVE-2022-38465

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21...
Siemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc2 FirmwareSiemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc FirmwareSiemens Simatic Drive Controller Cpu 1504d Tf FirmwareSiemens Simatic Drive Controller Cpu 1507d Tf FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Simatic S7-1500 Cpu 1510sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1510sp FirmwareSiemens Simatic S7-1500 Cpu 1511-1 FirmwareSiemens Simatic S7-1500 Cpu 151511c-1 FirmwareSiemens Simatic S7-1500 Cpu 151511f-1 FirmwareSiemens Simatic S7-1500 Cpu 1511t-1 FirmwareSiemens Simatic S7-1500 Cpu 1511tf-1 FirmwareSiemens Simatic S7-1500 Cpu 1512c-1 FirmwareSiemens Simatic S7-1500 Cpu 1512sp-1 FirmwareSiemens Simatic S7-1500 Cpu 1512spf-1 Firmware
7.8
CVSSv3

CVE-2022-24408

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of oper...
Siemens Sinumerik Mc FirmwareSiemens Sinumerik Mc Firmware 1.15Siemens Sinumerik One FirmwareSiemens Sinumerik One Firmware 6.15
9.8
CVSSv3

CVE-2020-15782

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21...
Siemens Simatic Driver Controller FirmwareSiemens S7-1200 Cpu FirmwareSiemens S7-1500 Cpu FirmwareSiemens Simatic S7-1500 Software ControllerSiemens Simatic S7-plcsim AdvancedSiemens Et 200sp Open Controller Firmware
5.9
CVSSv3

CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
7.5
CVSSv3

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Lldpd Project LldpdOpenvswitch OpenvswitchRedhat Enterprise Linux 7.0Redhat Virtualization 4.0Redhat Openstack 10Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.0Redhat Openstack 13Fedoraproject Fedora 33Siemens Simatic Hmi Unified Comfort Panels FirmwareSiemens Simatic Net Cp 1243-1 Firmware -Siemens Simatic Net Cp 1243-8 Irc Firmware -Siemens Simatic Net Cp 1542sp-1 Firmware -Siemens Simatic Net Cp 1542sp-1 Irc Firmware -Siemens Simatic Net Cp 1543-1 Firmware -Siemens Simatic Net Cp 1543sp-1 Firmware -Siemens Simatic Net Cp 1545-1 Firmware -Siemens Tim 1531 Irc FirmwareSiemens Sinumerik One Firmware
6.8
CVSSv3

CVE-2020-8745

Insufficient control flow management in subsystem for Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions prior to 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation...
Intel Converged Security And Manageability EngineIntel Trusted Execution TechnologySiemens Simatic Drive Controller FirmwareSiemens Simatic Et200sp 1515sp Pc2 FirmwareSiemens Simatic Field Pg M5 FirmwareSiemens Simatic Field Pg M6 Firmware -Siemens Simatic Ipc127e FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e FirmwareSiemens Simatic Ipc527g FirmwareSiemens Simatic Ipc547g FirmwareSiemens Simatic Ipc627e FirmwareSiemens Simatic Ipc647e FirmwareSiemens Simatic Ipc667e FirmwareSiemens Simatic Ipc847e FirmwareSiemens Simatic Itp1000 FirmwareSiemens Sinumerik 828d Hw Pu.4 FirmwareSiemens Sinumerik Mc Mcu 1720 FirmwareSiemens Sinumerik One Firmware -Siemens Sinumerik 840d Sl Ht 10 Firmware -Siemens Sinumerik One Ncu 1740 FirmwareSiemens Sinumerik One Ppu 1740 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionIMAPCVE-2024-36103CVE-2024-28995CVE-2024-37325CVE-2024-30078CVE-2024-30082SQL injectionCVE-2024-30052
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook