Advisories · Technology

Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants).

Every CVE that names Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-44695 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1286
Not analysed yet 13 Dec 2022
CVE-2021-44694 CVE record

CVSS 5.5 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1287
Not analysed yet 13 Dec 2022
CVE-2021-44693 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1284
Not analysed yet 13 Dec 2022
CVE-2021-40365 CVE record

CVSS 7.5 High

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-20
Not analysed yet 13 Dec 2022
CVE-2022-30694 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site request forgery (CSRF)
Not analysed yet 8 Nov 2022
CVE-2022-38465 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
Not analysed yet 11 Oct 2022
CVE-2021-37205 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Denial of service
Not analysed yet 9 Feb 2022
CVE-2021-37204 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2021-37185 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2021-37172 CVE record

Improper authentication in Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- Authentication bypass
Not analysed yet 10 Aug 2021
CVE-2020-28397 CVE record

Incorrect authorization in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Broken access control
Not analysed yet 10 Aug 2021
CVE-2020-15782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 28 May 2021
CVE-2019-13940 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU and others
- Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU
- Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU
- Denial of service
Not analysed yet 11 Feb 2020
CVE-2019-10943 CVE record

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-353
Not analysed yet 13 Aug 2019
CVE-2019-10929 CVE record

Broken or risky cryptographic algorithm in Siemens SIMATIC CP 1626 and others
- Siemens SIMATIC CP 1626
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Weak cryptography or TLS
Not analysed yet 13 Aug 2019