Siemens Siplus S7 1200 CPU 1214C Dc/Dc/Rly vulnerabilities
3 vulnerabilities
Known vulnerabilities in Siemens Siplus S7 1200 CPU 1214C Dc/Dc/Rly, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-40820siemenssidoor_atd430w_firmware+144
EPSS score0.49%
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.CVE-2020-28400siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+309EPSS score1.86%
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.CVE-2024-46886siemenssimatic drive controller cpu 1504d tf+125EPSS score0.40%
The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.