Siemens SIMATIC CP 1243-7 Lte/us Firmware vulnerabilities

2 CVEs affecting Siemens SIMATIC CP 1243-7 Lte/us Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-41991, published 2021-10-18.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-41991, published 2021-10-18. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement…
• CVE-2017-2680, published 2017-05-11. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the…