SIMATIC S7-1200 CPU family (incl. SIPLUS variants) vulnerabilities

Product

SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

by Siemens · last CVE Dec 13, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 1High 10Medium 5Low 0

Severity

All severities16 Critical1 High10 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SIMATIC S7-1200 CPU family (incl. SIPLUS variants) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-38465	7.8	0%	Oct 11	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V4.5.0
CVE-2021-37205	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions >= V4.5.0 < V4.5.2
CVE-2021-37204	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP… Affected: All versions < V4.5.0; All versions >= V4.5.0 < V4.5.2
CVE-2021-37185	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions >= V4.5.0 < V4.5.2
CVE-2021-37172	7.5	1%	Aug 10	A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl Affected: V4.5.0
CVE-2019-19300	7.5	2%	Apr 14	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR… Affected: All versions < V4.4.0
CVE-2019-13940	7.5	2%	Feb 11	A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET… Affected: All versions < V4.1
CVE-2019-10936	7.5	2%	Oct 10	Affected devices improperly handle large amounts of specially crafted UDP packets Affected: All versions < V4.4.0
CVE-2019-10943	7.5	1%	Aug 13	A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V4.4.0; All versions >= V4.4.0
CVE-2017-12741	7.5	3%	Dec 26	Specially crafted packets sent to port 161/udp could cause a denial of service condition Affected: All versions < V4.2.3