Siemens SIMATIC S7-1200 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SIMATIC S7-1200 Devices Vulnerability: Improper Authentication 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-222-09 Siemens SIMATIC S7-1200 that was...

CVE-2020-15782

CVE-2020-15782 covers Siemens SIMATIC S7-1200/1500 CPUs and related devices (including ET 200SP Open Controller, S7-PLCSIM Advanced, SINAMICS GH180, SINUMERIK MC/ONE, and S7-1500 Software Controller) with a memory protection bypass via a specific operation. A remote, unauthenticated attacker can ...

Siemens SIMATIC S7-1500

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC S7-1500 CPU 1518F-4 Vulnerabilities: Improper Initialization, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these Intel...

CVE-2021-25675

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause...

CVE-2021-25674

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause t...

CVE-2021-25674

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause t...

CVE-2021-25673

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop,...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop,...

CVE-2021-25674

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause t...

CVE-2021-25674

CVE-2021-25674 affects SIMATIC S7-PLCSIM v5.4 (all versions) where opening a specially crafted file can trigger a NULL pointer dereference, causing the application to terminate and require restart. The vulnerability is locally exploitable; no remote access is indicated. Connected sources corrobor...

CVE-2021-25673

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop,...

CVE-2021-25675

The CVE-2021-25675 issue affects Siemens SIMATIC S7-PLCSIM v5.4 (All versions). The vulnerability arises when opening a specially crafted file, leading to a divide-by-zero error that can terminate the application and require restart, with a local access prerequisite. Documents summarize this as a...

CVE-2021-25675

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause...

CVE-2021-25673

CVE-2021-25673 affects Siemens SIMATIC S7-PLCSIM v5.4 (all versions). A vulnerability allows a local attacker to trigger a denial-of-service by opening a specially crafted file, causing an infinite loop and an unresponsive application that must be restarted. The Red Hat/NVD/ISA advisories corrobo...

Siemens SIMATIC S7-PLCSIM Denial of Service Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker can exploit the vulnerability to cause a...

Siemens SIMATIC S7-PLCSIM

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-PLCSIM v5.4 Vulnerabilities: Infinite Loop, NULL Pointer Dereference, Divide by Zero 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker with local...

SIMATIC S7-PLCSM suffers from a denial of service vulnerability (CNVD-2021-05558)

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in SIMATIC S7-PLCSM

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM contains a binary vulnerability that can be exploited by attackers to cause a denial of service...

SIMATIC S7-PLCSM suffers from a Denial of Service Vulnerability

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...