Known vulnerabilities in SIMATIC Drive Controller

Vendor: Siemens
Software: SIMATIC Drive Controller
Software CPE: cpe:2.3:h:siemens:simatic_drive_controller:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC Drive Controller SIMATIC Drive Controller is affected by 22 known vulnerabilities: 1 high, 5 medium, 16 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70376 - Improper input validation
CVE-2021-44695		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70375 - Improper input validation
CVE-2021-44694		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70374 - Improper input validation
CVE-2021-44693		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70373 - Improper input validation
CVE-2021-40365		 CWE-20 Medium
No
No
 3.0.1 15.12.2022 SB2022121520
#VU68263 - Insufficiently Protected Credentials
CVE-2022-38465		 CWE-522 Low
No
No
 2.9.2 12.10.2022 SB2022101249
#VU60532 - Missing release of memory after effective lifetime
CVE-2021-37205		 CWE-401 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU60531 - Operation on a Resource after Expiration or Release
CVE-2021-37204		 CWE-672 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU60530 - Operation on a Resource after Expiration or Release
CVE-2021-37185		 CWE-672 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU55778 - Improper Authorization
CVE-2020-28397		 CWE-285 Medium
No
No
 2.9.2 11.08.2021 SB2021081110
#VU54220 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24513		 CWE-200 Low
No
No
 - 18.06.2021 SB2021061807
SB2021061808
SB2021062119
and 22 more
#VU54204 - Observable discrepancy
CVE-2020-24512		 CWE-203 Low
No
No
 - 17.06.2021 SB2021061716
SB2021061808
SB2021062119
and 35 more
#VU54203 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24511		 CWE-200 Low
No
No
 - 17.06.2021 SB2021061716
SB2021061808
SB2021062119
and 35 more
#VU54199 - Out-of-bounds read
CVE-2020-24506		 CWE-125 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
and 1 more
#VU54198 - Memory corruption
CVE-2020-8703		 CWE-119 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
#VU54196 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24507		 CWE-200 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
and 1 more
#VU54195 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-8704		 CWE-362 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2023032421
#VU54168 - Improper input validation
CVE-2020-24486		 CWE-20 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54167 - Out-of-bounds read
CVE-2020-12360		 CWE-125 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54165 - Memory corruption
CVE-2020-12358		 CWE-119 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54161 - Improper Initialization
CVE-2020-12357		 CWE-665 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101817


Showing elements 1 - 20 out of 22