Siemens Simatic S7-300 Cpu Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic S7-300 Cpu Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2015-2177 — CVSS 7.5 (high): Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1)…
• CVE-2016-9158 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and…
• CVE-2019-18336 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17)…
• CVE-2019-19300 — CVSS 7.5 (high): A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET…
• CVE-2019-10923 — CVSS 7.5 (high): An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization…
• CVE-2019-10936 — CVSS 7.5 (high): Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to…
• CVE-2016-9159 — CVSS 5.9 (medium): A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and…
• CVE-2022-25622 — CVSS 5.3 (medium): The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the…