Siemens CP 1604 Firmware vulnerabilities

4 CVEs affecting Siemens CP 1604 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-13810, published 2019-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0659, published 2013-04-01. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185.
CVE-2018-13808, published 2019-04-17. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a…
CVE-2018-13809, published 2019-04-17. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could allow Cross-Site Scripting (XSS) attacks if…
CVE-2018-13810, published 2019-04-17. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery…