Home/Product/siemens simatic s7 300 cpu firmware
Product

siemens simatic s7 300 cpu firmware

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2022-25622
all versions
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments wh
5.3MEDIUM
CVE-2019-19300
all versions
A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for
7.5HIGH
CVE-2019-18336
< 3.3.17
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3
7.5HIGH
CVE-2019-10936
< 3.3.17
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote a
7.5HIGH
CVE-2019-10923
< 3.3.17
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchroni
7.5HIGH
CVE-2016-9159
all versions
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CP
5.9MEDIUM
CVE-2016-9158
all versions
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CP
7.5HIGH
CVE-2016-8673
all versions
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 4
8.8HIGH
CVE-2016-8672
all versions
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 4
5.3MEDIUM
CVE-2015-2177
all versions
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packet
7.5HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin