Vulnerabilities of Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-44694 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 5.5 Medium | Dec 13, 2022 |
| CVE-2021-44693 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Medium | Dec 13, 2022 |
| CVE-2021-44695 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Medium | Dec 13, 2022 |
| CVE-2021-40365 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 7.5 High | Dec 13, 2022 |
| CVE-2022-30694 | The login endpoint /FormLogin in affected web services does not apply proper origin checking | 6.5 Medium | Nov 8, 2022 |
| CVE-2022-38465 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… | 9.3 Critical | Oct 11, 2022 |
| CVE-2021-37205 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET… | 7.5 High | Feb 9, 2022 |
| CVE-2021-37204 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller… | 7.5 High | Feb 9, 2022 |
| CVE-2021-37185 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET… | 7.5 High | Feb 9, 2022 |
| CVE-2021-37172 | A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl | Not rated | Aug 10, 2021 |
| CVE-2020-28397 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… | Not rated | Aug 10, 2021 |
| CVE-2020-28400 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… | 7.5 High | Jul 13, 2021 |
| CVE-2020-15782 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… | 9.8 Critical | May 28, 2021 |
| CVE-2019-19300 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation… | 7.5 High | Apr 14, 2020 |
| CVE-2019-13940 | A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro… | 5.3 Medium | Feb 11, 2020 |
| CVE-2019-10936 | Affected devices improperly handle large amounts of specially crafted UDP packets | 7.5 High | Oct 10, 2019 |
| CVE-2019-10943 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open… | Not rated | Aug 13, 2019 |
| CVE-2019-10929 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC… | Not rated | Aug 13, 2019 |
| CVE-2017-12741 | Specially crafted packets sent to port 161/udp could cause a denial of service condition | 7.5 High | Dec 26, 2017 |
| CVE-2017-2681 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a… | 6.5 Medium | May 11, 2017 |
| CVE-2017-2680 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a… | 6.5 Medium | May 11, 2017 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91