CVE-2021-44695

< 4.6.0

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to ca

4.9MEDIUM

CVE-2021-44694

< 4.6.0

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to ca

5.5MEDIUM

CVE-2021-44693

< 4.6.0

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to ca

4.9MEDIUM

CVE-2021-40365

< 4.6.0

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to ca

7.5HIGH

CVE-2022-30694

all versions

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated re

6.5MEDIUM

CVE-2021-37205

>= 4.5.0 and < 4.5.2

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Co

7.5HIGH

CVE-2021-37204

>= 4.5.0 and < 4.5.2

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (A

7.5HIGH

CVE-2021-37185

>= 4.5.0 and < 4.5.2

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Co

7.5HIGH

CVE-2021-3449

all versions

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renego

5.9MEDIUM

CVE-2019-10936

< 4.4.0

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote a

7.5HIGH

CVE-2019-10943

< 4.4

A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP

7.5HIGH

CVE-2019-10929

<= 4.0

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLU

5.9MEDIUM

CVE-2013-2780

< 4.0

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control o

CVE-2013-0700

< 4.0

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control o

CVE-2012-3040

>= 2.0.0 and < 3.0.2

Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attacke

CVE-2012-3037

>= 2.0.0 and < 3.0.0

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority ce