Siemens SIMATIC ET 200AL IM 157-1 PN

9 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2025-40944*A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6EHIGH 8.70.4 %
CVE-2025-40820Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This HIGH 8.70.5 %
CVE-2024-23814The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receivingMEDIUM 6.90.6 %
CVE-2022-25622All versionsThe PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the miHIGH 7.50.9 %
CVE-2019-19300A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IHIGH 7.51.7 %
CVE-2019-10936All versionsAffected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker toHIGH 7.52.1 %
CVE-2017-12741< V1.0.2Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.HIGH 8.73.3 %
CVE-2017-2681Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service conHIGH 7.10.9 %
CVE-2017-2680Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment HIGH 7.11.1 %