Simatic Drive Controller Cpu 1507d Tf Firmware Security Vulnerabilities and Issues — Simatic Drive Controller Cpu 1507d Tf Firmware CVE List

Lucene search

SiemensSimatic Drive Controller Cpu 1507d Tf Firmware

8 matches found

CVE•added 2023/09/12 10:15 a.m.•130 views

CVE-2023-28831

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by send...

7.5CVSS7.5AI score0.00428EPSS

CVE•added 2022/02/09 4:15 p.m.•119 views

CVE-2021-37185

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions

7.5CVSS7.4AI score0.01431EPSS

CVE•added 2022/11/08 11:15 a.m.•110 views

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

6.5CVSS4.6AI score0.00141EPSS

CVE•added 2022/10/11 11:15 a.m.•109 views

CVE-2022-38465

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-120...

9.3CVSS8AI score0.00104EPSS

CVE•added 2022/02/09 4:15 p.m.•108 views

CVE-2021-37205

7.5CVSS7.4AI score0.01138EPSS

CVE•added 2022/02/09 4:15 p.m.•94 views

CVE-2021-37204

A vulnerability has been identified in SIMATIC Drive Controller family (All versions = V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions = V21.9 < V21.9...

7.5CVSS7.4AI score0.01431EPSS

CVE•added 2023/01/10 12:15 p.m.•84 views

CVE-2022-38773

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

6.8CVSS6.7AI score0.00104EPSS

CVE•added 2023/12/12 12:15 p.m.•77 views

CVE-2023-46156

Affected devices improperly handle specially crafted packets sent to port 102/tcp.This could allow an attacker to create a denial of service condition. A restart is needed to restorenormal operations.

7.5CVSS7.4AI score0.0004EPSS