Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-44695 | All versions < V4.6.0 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-44694 | All versions < V4.6.0 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.7 % | ||
| CVE-2021-44693 | All versions < V4.6.0 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-40365 | All versions < V4.6.0 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.9 % | ||
| CVE-2022-30694 | | The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attac | MEDIUM 6.5 | 0.3 % | ||
| CVE-2022-38465 | All versions < V4.5.0 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.3 | 0.2 % | ||
| CVE-2021-37205 | All versions >= V4.5.0 < V4.5.2 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 1.6 % | ||
| CVE-2021-37204 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All version | HIGH 7.5 | 2.2 % | ||
| CVE-2021-37185 | All versions >= V4.5.0 < V4.5.2 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 2.1 % | ||
| CVE-2021-37172 | V4.5.0 | A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate ag | HIGH 7.5 | 0.9 % | ||
| CVE-2020-28397 | Version V4.4 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | MEDIUM 5.3 | 0.8 % | ||
| CVE-2020-15782 | All versions < V4.5.0 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.8 | 5.2 % | ||
| CVE-2019-19300 | | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET I | HIGH 7.5 | 1.7 % | ||
| CVE-2019-13940 | | A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (A | HIGH 7.5 | 1.7 % | ||
| CVE-2019-10936 | | Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to | HIGH 7.5 | 2.1 % | ||
| CVE-2019-10943 | All versions < V4.4.0 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. | HIGH 7.5 | 1.0 % | ||
| CVE-2019-10929 | | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants | MEDIUM 5.9 | 1.0 % | ||
| CVE-2017-12741 | | Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually. | HIGH 8.7 | 3.3 % |