Siemens Siplus S7 1500 Cpu 1515R 2 Pn Tx Rail vulnerabilities
9 vulnerabilities
Known vulnerabilities in Siemens Siplus S7 1500 Cpu 1515R 2 Pn Tx Rail, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40365siemenssimatic drive controller cpu 1504d tf+156
EPSS score0.93%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44693siemenssimatic drive controller cpu 1504d tf+156EPSS score0.77%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44694siemenssimatic drive controller cpu 1504d tf+152EPSS score0.66%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44695siemenssimatic drive controller cpu 1504d tf+156EPSS score0.77%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2022-38773siemenssimatic drive controller cpu 1504d tf+75EPSS score0.29%
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.CVE-2022-30694siemens6ag1151-8ab01-7ab0_firmware+197EPSS score0.32%
The login endpoint /FormLogin in affected web services does not apply proper origin checking.
This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.CVE-2024-46886siemenssimatic drive controller cpu 1504d tf+125EPSS score0.40%
The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.CVE-2023-46156siemenssimatic drive controller cpu 1504d tf+79EPSS score1.24%
Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a denial of service condition. A restart is needed to restore
normal operations.CVE-2023-28831siemenssimatic braumat+116EPSS score1.13%
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.
This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.