Simatic S7 300 Cpu Firmware vulnerabilities | LiveThreat CVE Feed

Product

Simatic S7 300 Cpu Firmware

by Siemens · last CVE Apr 12, 2022

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 8Medium 2Low 0

Severity

All severities10 Critical0 High8 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simatic S7 300 Cpu Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8673	8.8	1%	Nov 23	A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl Affected: All versions, or not specified
CVE-2022-25622	7.5	1%	Apr 12	The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than… Affected: All versions, or not specified
CVE-2019-19300	7.5	2%	Apr 14	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR… Affected: All versions, or not specified
CVE-2019-18336	7.5	2%	Mar 10	A vulnerability has been identified in SIMATIC S7-300 CPU family (incl Affected: before 3.3.17
CVE-2019-10936	7.5	2%	Oct 10	Affected devices improperly handle large amounts of specially crafted UDP packets Affected: before 3.3.17
CVE-2019-10923	7.5	1%	Oct 10	An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation Affected: before 3.3.17
CVE-2016-9158	7.5	3%	Dec 17	A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl Affected: All versions, or not specified
CVE-2015-2177	7.5	34%	Mar 7	Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or (2) Profibus Affected: All versions, or not specified
CVE-2016-9159	5.9	2%	Dec 17	A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl Affected: All versions, or not specified
CVE-2016-8672	5.3	2%	Nov 23	A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl Affected: All versions, or not specified