Siemens Simatic Ipc547g Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic Ipc547g Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2017-5689 — CVSS 9.8 (critical) — actively exploited: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology…
• CVE-2020-12360 — CVSS 7.8 (high): Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of…
• CVE-2020-0590 — CVSS 7.8 (high): Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of…
• CVE-2020-8745 — CVSS 6.8 (medium): Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40…
• CVE-2020-8703 — CVSS 6.7 (medium): Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17…
• CVE-2020-12357 — CVSS 6.7 (medium): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2020-8704 — CVSS 6.4 (medium): Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation…
• CVE-2020-8670 — CVSS 6.4 (medium): Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via…
• CVE-2020-0543 — CVSS 5.5 (medium): Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to…
• CVE-2018-3639 — CVSS 5.5 (medium): Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior…
• CVE-2020-24486 — CVSS 5.5 (medium): Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of…
• CVE-2020-24507 — CVSS 4.4 (medium): Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17…
• CVE-2020-12358 — CVSS 4.4 (medium): Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via…