Home/Product/siemens sinamics sl150 firmware
Product

siemens sinamics sl150 firmware

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2021-31337
all versions
The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which
9.8CRITICAL
CVE-2021-27388
all versions
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that coul
9.8CRITICAL
CVE-2021-27386
all versions
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V
7.5HIGH
CVE-2021-27385
all versions
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V
7.5HIGH
CVE-2021-27384
all versions
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V
9.8CRITICAL
CVE-2021-27383
all versions
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V
7.5HIGH
CVE-2020-15798
all versions
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC
9.8CRITICAL
CVE-2019-10936
< 4.7
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote a
7.5HIGH
CVE-2019-10923
< 4.7
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchroni
7.5HIGH
CVE-2019-6568
< 4.8
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may ca
7.5HIGH
CVE-2017-2680
< 4.8
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Etherne
6.5MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin