Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-13940 | | A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (A | HIGH 7.5 | 1.7 % | ||
| CVE-2019-10923 | | An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IR | HIGH 7.5 | 1.4 % | ||
| CVE-2019-6568 | | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a deni | HIGH 7.5 | 1.4 % | ||
| CVE-2018-16557 | | A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMA | HIGH 8.2 | 0.8 % | ||
| CVE-2018-16556 | | A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMA | HIGH 7.5 | 1.5 % | ||
| CVE-2017-12741 | | Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually. | HIGH 8.7 | 3.3 % |