CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

158 matches found

Tenable Nessus•added 2026/06/18 12:0 a.m.•7 views

Siemens SIPROTEC 5 Small Space of Random Values (CVE-2024-54017)

Affected devices do not use sufficiently random values to create session identifiers. This could allow an unauthenticated remote attacker to brute force a session identifier and gain read access to limited information from the web server without authorization. This plugin only works with...

6.9CVSS7.2AI score0.00306EPSS

Exploits0References6

RedhatCVE•added 2026/01/09 11:26 a.m.•8 views

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

9.8CVSS7.3AI score0.02087EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:16 a.m.•15 views

CVE-2025-40742

A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V11.0, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V11.0, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V11.0, SIPROTEC 5 6MD89 CP300 All versions V11.0, SIPROTEC 5...

6CVSS5.7AI score0.00275EPSS

Exploits0References1

Tenable Nessus•added 2025/11/18 12:0 a.m.•4 views

Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)

The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...

8.2CVSS7.1AI score0.00205EPSS

Exploits0References7

Tenable Nessus•added 2025/11/18 12:0 a.m.•4 views

Siemens SIPROTEC 5 Allocation of Resources Without Limits or Throttling (CVE-2025-40570)

Affected devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcing them to exhaust their memory and stop respondin...

2.4CVSS5.8AI score0.00177EPSS

Exploits0References6