Siemens Siplus s7-1200 CPU 1214 Dc/dc/dc vulnerabilities

5 CVEs affecting Siemens Siplus s7-1200 CPU 1214 Dc/dc/dc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24812, published 2025-02-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-23814, published 2025-02-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment…
CVE-2025-24811, published 2025-02-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly…
CVE-2025-24812, published 2025-02-11. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) (All versions < V4.7),…
CVE-2023-37482, published 2025-02-11. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information…
CVE-2024-47100, published 2025-01-14. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly…