Siemens Simatic S7-300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic S7-300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2017-12741 — CVSS 7.5 (high): Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
• CVE-2018-16561 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly validate S7 communication…
• CVE-2019-6568 — CVSS 7.5 (high): The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a…
• CVE-2017-2680 — CVSS 6.5 (medium): Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment…
• CVE-2017-2681 — CVSS 6.5 (medium): Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service…
• CVE-2018-4843 — CVSS 6.5 (medium): A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All…