Skip to content

Vulnerabilities of Siemens SIPLUS S7-300 CPU 317F-2 PN/DP

Is your version affected?

CVE Summary Score Published
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 High May 12, 2026
CVE-2025-40820 Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values… 7.5 High Dec 9, 2025
CVE-2024-23814 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… 5.3 Medium Feb 11, 2025
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking 6.5 Medium Nov 8, 2022
CVE-2022-25622 The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP… 5.3 Medium Apr 12, 2022
CVE-2019-19300 A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation… 7.5 High Apr 14, 2020
CVE-2019-13940 A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro… 5.3 Medium Feb 11, 2020
CVE-2019-10923 An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time… 7.5 High Oct 10, 2019
CVE-2019-10936 Affected devices improperly handle large amounts of specially crafted UDP packets 7.5 High Oct 10, 2019
CVE-2019-6568 The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition 7.5 High Apr 17, 2019
CVE-2018-4843 A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… 6.5 Medium Mar 20, 2018

Other Siemens products