Siemens SIMATIC Drive Controller Firmware vulnerabilities

2 CVEs affecting Siemens SIMATIC Drive Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24513, published 2021-06-09.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24513, published 2021-06-09. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-8745, published 2020-11-12. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80…