Advisories · Technology

Siemens SIMATIC Drive Controller family.

Every CVE that names Siemens SIMATIC Drive Controller family among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38465 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
Not analysed yet 11 Oct 2022
CVE-2021-37205 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Denial of service
Not analysed yet 9 Feb 2022
CVE-2021-37204 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2021-37185 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2020-28397 CVE record

Incorrect authorization in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Broken access control
Not analysed yet 10 Aug 2021
CVE-2020-15782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 28 May 2021
CVE-2019-10943 CVE record

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-353
Not analysed yet 13 Aug 2019