Browse CVEs

HIGH 8.2 CVE-2018-4851 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device c… Siclock Tc400 Firmware Mitigation only Fix from $1,9502018-07-03 MEDIUM 6.5 CVE-2018-4855 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client … Siclock Tc400 Firmware Mitigation only Fix from $1,6002018-07-03 HIGH 8.8 CVE-2018-11447 A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 7.8 CVE-2018-11449 A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for admi… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 7.2 CVE-2018-4859 A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 HIGH 7.2 CVE-2018-4860 A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou… Scalance M875 Firmware Mitigation only Fix from $1,9502018-06-26 CRITICAL 9.8 CVE-2017-12739EPSS 6% An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The in… Sm 2556 Firmware Mitigation only Fix from $2,3002017-11-15 MEDIUM 6.1 CVE-2017-12738 An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The in… Sm 2556 Firmware Mitigation only Fix from $1,6002017-11-15 MEDIUM 5.3 CVE-2017-12737 An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The in… Sm 2556 Firmware Mitigation only Fix from $1,6002017-11-15 CRITICAL 9.8 CVE-2017-6869 A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user … Viewport For Web Office Portal Mitigation only Fix from $2,3002017-08-08 HIGH 7.4 CVE-2017-6873 A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in… Ozw772 Firmware Mitigation only Fix from $1,9502017-08-08 MEDIUM 6.5 CVE-2017-6872 A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to … Ozw772 Firmware Mitigation only Fix from $1,6002017-08-08 MEDIUM 6.5 CVE-2017-6865 A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET… Pcs 7 Mitigation only Fix from $1,6002017-05-11 HIGH 7.4 CVE-2017-2685 Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (ex… Sinumerik Integrate Access Mymachine\/ethernet Mitigation only Fix from $1,9502017-03-01 HIGH 7.5 CVE-2016-9158 A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS varia… Simatic S7 300 Cpu Firmware Mitigation only Fix from $1,9502016-12-17 MEDIUM 5.9 CVE-2016-9159 A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS varia… Simatic S7 300 Cpu Firmware Mitigation only Fix from $1,6002016-12-17 HIGH 8.8 CVE-2016-8673 A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl… Simatic S7 300 Cpu Firmware Mitigation only Fix from $1,9502016-11-23 MEDIUM 5.3 CVE-2016-8672 A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl… Simatic Cp 343 1 Firmware Mitigation only Fix from $1,6002016-11-23 HIGH 8.8 CVE-2016-7114 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP … En100 Ethernet Module Firmware Mitigation only Fix from $1,9502016-09-06 HIGH 7.5 CVE-2016-7113 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP … En100 Ethernet Module Firmware Mitigation only Fix from $1,9502016-09-06 HIGH 7.8 CVE-2016-6486 Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors. Sinema Server Mitigation only Fix from $1,9502016-08-08 HIGH 7.5 CVE-2016-5744 Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets. Simatic Wincc Mitigation only Fix from $1,9502016-07-22 HIGH 7.5 CVE-2016-3949 Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before… Simatic S7 300 With Profitnet Support Firmware Mitigation only Fix from $1,9502016-06-27 MEDIUM 5.3 CVE-2016-4785 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP … Siprotec Firmware Mitigation only Fix from $1,6002016-05-31 MEDIUM 5.3 CVE-2016-4784 A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP … Siprotec Firmware Mitigation only Fix from $1,6002016-05-31 MEDIUM 5.3 CVE-2016-3963EPSS 9% Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443. Scalance S613 No fix yet Fix from $1,6002016-04-08 MEDIUM 5.3 CVE-2016-2201 Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102. Simatic S7 1500 Cpu Firmware Mitigation only Fix from $1,6002016-02-08 HIGH 7.5 CVE-2015-2177EPSS 35% Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 1… Simatic S7 300 Cpu Firmware No fix yet Fix from $1,9502015-03-07 MEDIUM 5.0 CVE-2015-1358 The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) bef… Wincc Mitigation only Fix from $1,6002015-02-18 HIGH 10.0 CVE-2015-1449 Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware b… Ruggedcom Firmware Mitigation only Fix from $1,9502015-02-02