Siemens Simatic S7-plcsim Advanced Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic S7-plcsim Advanced Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2022-38465 — CVSS 9.3 (critical): A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP…
• CVE-2021-37204 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All…
• CVE-2021-37205 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2021-40365 — CVSS 7.5 (high): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-37185 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller…
• CVE-2023-28831 — CVSS 7.5 (high): The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application…
• CVE-2023-46156 — CVSS 7.5 (high): Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of…
• CVE-2021-44694 — CVSS 5.5 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44693 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44695 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…