Siemens Tim 4r-Ie Firmware vulnerabilities

9 CVEs affecting Siemens Tim 4r-Ie Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10939, published 2020-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7855, published 2017-08-07. Medium severity, CVSS 6.5. EPSS: 31.1% chance of exploitation in the next 30 days. The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a…
CVE-2016-4953, published 2016-07-05. High severity, CVSS 7.5. EPSS: 17.2% chance of exploitation in the next 30 days. ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at…
CVE-2016-4954, published 2016-07-05. High severity, CVSS 7.5. EPSS: 13.3% chance of exploitation in the next 30 days. The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many…
CVE-2015-7705, published 2017-08-07. Critical severity, CVSS 9.8. EPSS: 12.2% chance of exploitation in the next 30 days. The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.
CVE-2015-7977, published 2017-01-30. Medium severity, CVSS 5.9. EPSS: 6.3% chance of exploitation in the next 30 days. ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
CVE-2015-5219, published 2017-07-21. High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days. The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service…
CVE-2015-7974, published 2016-01-26. High severity, CVSS 7.7. EPSS: 5.7% chance of exploitation in the next 30 days. NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via…
CVE-2015-7973, published 2017-01-30. Medium severity, CVSS 6.5. EPSS: 3.4% chance of exploitation in the next 30 days. NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
CVE-2019-10939, published 2020-04-14. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS…