Siemens SIMATIC ITP1000 vulnerabilities

3 CVEs affecting Siemens SIMATIC ITP1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2884, published 2025-06-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-2884, published 2025-06-10. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See…
CVE-2024-56182, published 2025-03-11. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All…
CVE-2024-56181, published 2025-03-11. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All…