Siemens Tim 1531 Irc Firmware vulnerabilities
16 CVEs affecting Siemens Tim 1531 Irc Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43768, published 2023-04-11.
More from Siemens.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
- CVE-2018-4841, published 2018-03-29. Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days. A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device…
- CVE-2020-27827, published 2021-03-18. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of…
- CVE-2018-13816, published 2018-12-12. Critical severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an…
- CVE-2021-37204, published 2022-02-09. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU…
- CVE-2021-37185, published 2022-02-09. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >=…
- CVE-2021-37205, published 2022-02-09. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >=…
- CVE-2019-6568, published 2019-04-17. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the…
- CVE-2022-43768, published 2023-04-11. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3…
- CVE-2022-43716, published 2023-04-11. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3…
Latest
- CVE-2022-43767, published 2023-04-11. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3…
- CVE-2021-44695, published 2022-12-13. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- CVE-2021-44694, published 2022-12-13. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- CVE-2021-44693, published 2022-12-13. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- CVE-2021-40365, published 2022-12-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.