Siemens SIMATIC s7-400 CPU 414-3 Pn/dp vulnerabilities

2 CVEs affecting Siemens SIMATIC s7-400 CPU 414-3 Pn/dp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3017, published 2012-07-31.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-3017, published 2012-07-31. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed…
• CVE-2012-3016, published 2012-07-31. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets.