Siemens Sinamics s210 Firmware vulnerabilities

3 CVEs affecting Siemens Sinamics s210 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40594, published 2025-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6568, published 2019-04-17. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the…
CVE-2023-38380, published 2023-12-12. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1…
CVE-2025-40594, published 2025-09-09. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices…