Siemens Simatic S7-1200 Cpu 1211c Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic S7-1200 Cpu 1211c Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2013-0700 — CVSS 7.8 (high): Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage)…
• CVE-2013-2780 — CVSS 7.8 (high): Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage)…
• CVE-2021-37205 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2019-10936 — CVSS 7.5 (high): Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to…
• CVE-2019-10943 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC…
• CVE-2021-37185 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2021-37204 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All…
• CVE-2021-40365 — CVSS 7.5 (high): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2022-30694 — CVSS 6.5 (medium): The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote…
• CVE-2021-3449 — CVSS 5.9 (medium): An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation…
• CVE-2019-10929 — CVSS 5.9 (medium): A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS…
• CVE-2021-44694 — CVSS 5.5 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44693 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44695 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2012-3037 — CVSS 4.3 (medium): The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority…
• CVE-2012-3040 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to…