Siemens Simatic S7 1500 CPU 1518T 4 Pn/Dp vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in Siemens Simatic S7 1500 CPU 1518T 4 Pn/Dp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-37482siemenssimatic drive controller cpu 1504d tf+91
EPSS score0.51%
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.CVE-2023-46156siemenssimatic drive controller cpu 1504d tf+79EPSS score1.24%
Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a denial of service condition. A restart is needed to restore
normal operations.CVE-2023-28831siemenssimatic braumat+116EPSS score1.13%
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.
This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.