Siemens Simatic Drive Controller Cpu 1504d Tf Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic Drive Controller Cpu 1504d Tf Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-38465 — CVSS 9.3 (critical): A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP…
• CVE-2021-37204 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All…
• CVE-2021-37205 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2023-46156 — CVSS 7.5 (high): Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of…
• CVE-2023-28831 — CVSS 7.5 (high): The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application…
• CVE-2021-37185 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2022-30694 — CVSS 6.5 (medium): The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote…
• CVE-2022-38773 — CVSS 4.6 (medium): Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not…