Siemens SIMATIC s7-1500 CPU Firmware vulnerabilities

14 CVEs affecting Siemens SIMATIC s7-1500 CPU Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-25622, published 2022-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-5074, published 2014-08-17. High severity, CVSS 7.1. EPSS: 9.7% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
CVE-2016-2200, published 2016-02-08. High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.
CVE-2014-2259, published 2014-03-16. High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets.
CVE-2014-2255, published 2014-03-16. High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets.
CVE-2014-2257, published 2014-03-16. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets.
CVE-2016-2201, published 2016-02-08. Medium severity, CVSS 5.3. EPSS: 2.9% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.
CVE-2014-2251, published 2014-03-16. High severity, CVSS 8.3. EPSS: 2.7% chance of exploitation in the next 30 days. The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic…
CVE-2014-2247, published 2014-03-16. Medium severity, CVSS 5.8. EPSS: 2.4% chance of exploitation in the next 30 days. The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors.
CVE-2014-2248, published 2014-03-16. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and…
CVE-2014-2246, published 2014-03-16. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or…

Latest

CVE-2022-25622, published 2022-04-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could…
CVE-2019-10936, published 2019-10-10. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
CVE-2014-2253, published 2014-03-16. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets.