Siemens SIMATIC Net CP 443-1 Opc Ua Firmware vulnerabilities

7 CVEs affecting Siemens SIMATIC Net CP 443-1 Opc Ua Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-9042, published 2018-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4953, published 2016-07-05. High severity, CVSS 7.5. EPSS: 17.2% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at…
CVE-2016-4956, published 2016-07-05. Medium severity, CVSS 5.3. EPSS: 16.4% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists…
CVE-2016-2518, published 2017-01-30. Medium severity, CVSS 5.3. EPSS: 15.1% chance of exploitation in the next 30 days. The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
CVE-2016-4954, published 2016-07-05. High severity, CVSS 7.5. EPSS: 13.3% chance of exploitation in the next 30 days. The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many…
CVE-2016-4955, published 2016-07-05. Medium severity, CVSS 5.9. EPSS: 8.8% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK…
CVE-2017-6458, published 2017-03-27. High severity, CVSS 8.8. EPSS: 6.5% chance of exploitation in the next 30 days. Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
CVE-2016-9042, published 2018-06-04. Medium severity, CVSS 5.9. EPSS: 3.9% chance of exploitation in the next 30 days. An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected…