Siemens SIMATIC Tim 1531 Irc Firmware vulnerabilities

3 CVEs affecting Siemens SIMATIC Tim 1531 Irc Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8286, published 2020-12-14.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-8286, published 2020-12-14. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
• CVE-2020-8169, published 2020-12-14. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
• CVE-2019-10929, published 2019-08-13. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU…