Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-37482 | | The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated re | MEDIUM 6.9 | 0.5 % | ||
| CVE-2023-46156 | < V30.1.0 | Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of servi | HIGH 7.5 | 1.2 % | ||
| CVE-2023-28831 | | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application | HIGH 8.7 | 1.1 % | ||
| CVE-2021-44695 | All versions < V21.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-44694 | All versions < V21.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.7 % | ||
| CVE-2021-44693 | All versions < V21.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-40365 | All versions < V21.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.9 % | ||
| CVE-2022-30694 | | The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attac | MEDIUM 6.5 | 0.3 % | ||
| CVE-2022-38465 | All versions < V21.9 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.3 | 0.2 % | ||
| CVE-2021-37205 | All versions >= V21.9 < V21.9.4 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 1.6 % | ||
| CVE-2021-37204 | All versions < V21.9 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All version | HIGH 7.5 | 2.2 % | ||
| CVE-2021-37185 | All versions >= V21.9 < V21.9.4 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 2.1 % | ||
| CVE-2020-28397 | All versions < V21.9 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | MEDIUM 5.3 | 0.8 % | ||
| CVE-2020-15782 | All versions < V21.9 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.8 | 5.2 % | ||
| CVE-2019-19300 | | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET I | HIGH 7.5 | 1.7 % | ||
| CVE-2019-10943 | All versions < V20.8 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. | HIGH 7.5 | 1.0 % | ||
| CVE-2019-10929 | All versions < V20.8 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-6575 | All versions < V2.7 | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS | HIGH 7.5 | 1.7 % | ||
| CVE-2019-6568 | | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a deni | HIGH 7.5 | 1.4 % |