Siemens SIMATIC Pdm Firmware vulnerabilities

3 CVEs affecting Siemens SIMATIC Pdm Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31894, published 2021-07-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
CVE-2021-31893, published 2021-07-13. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All…
CVE-2021-31894, published 2021-07-13. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All…