Siemens SIMATIC MV440 Firmware vulnerabilities

4 CVEs affecting Siemens SIMATIC MV440 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-27632, published 2021-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10925, published 2019-06-12. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated…
CVE-2020-27632, published 2021-03-10. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions.
CVE-2019-10926, published 2019-06-12. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained…
CVE-2019-13946, published 2020-02-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could…