Siemens Simatic S7 1200 Cpu vulnerabilities

3 vulnerabilities

Known vulnerabilities in Siemens Simatic S7 1200 Cpu, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2021-37172siemenssimatic_s7-1200_cpu_firmware+2
EPSS score
0.92%
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.7.5CVE-2019-10936siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+139
EPSS score
2.07%
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.8.7CVE-2023-28831siemenssimatic braumat+116
EPSS score
1.13%
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.