Siemens CP 1543-1 Firmware vulnerabilities

2 CVEs affecting Siemens CP 1543-1 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-41991, published 2021-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0160: OpenSSL Information Disclosure Vulnerability, published 2014-04-07. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-04. EPSS: 100% chance of exploitation in the next 30 days. The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process…
CVE-2021-41991, published 2021-10-18. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement…