Skip to content

Vulnerabilities of Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

Is your version affected?

CVE Summary Score Published
CVE-2024-23814 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… 5.3 Medium Feb 11, 2025
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking 6.5 Medium Nov 8, 2022
CVE-2019-19300 A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation… 7.5 High Apr 14, 2020
CVE-2019-13940 A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro… 5.3 Medium Feb 11, 2020
CVE-2019-6568 The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition 7.5 High Apr 17, 2019
CVE-2017-12741 Specially crafted packets sent to port 161/udp could cause a denial of service condition 7.5 High Dec 26, 2017
CVE-2017-2681 Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a… 6.5 Medium May 11, 2017
CVE-2017-2680 Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a… 6.5 Medium May 11, 2017

Other Siemens products