Known vulnerabilities in SIMATIC ET 200SP Open Controller CPU 1515SP PC2

Vendor: Siemens

Software: SIMATIC ET 200SP Open Controller CPU 1515SP PC2

Software CPE: cpe:2.3:a:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 26

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (26)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84383 - Use After Free CVE-2023-46156	CWE-416	Medium	No	No	-	13.12.2023	SB2023121330 SB2023121523
#VU80852 - Integer overflow CVE-2023-28831	CWE-190	Medium	No	No	21.9.7	18.09.2023	SB2023091816 SB2023121343
#VU70376 - Improper input validation CVE-2021-44695	CWE-20	Low	No	No	-	15.12.2022	SB2022121520
#VU70375 - Improper input validation CVE-2021-44694	CWE-20	Low	No	No	-	15.12.2022	SB2022121520
#VU70374 - Improper input validation CVE-2021-44693	CWE-20	Low	No	No	-	15.12.2022	SB2022121520
#VU70373 - Improper input validation CVE-2021-40365	CWE-20	Medium	No	No	-	15.12.2022	SB2022121520
#VU68263 - Insufficiently Protected Credentials CVE-2022-38465	CWE-522	Low	No	No	21.9	12.10.2022	SB2022101249
#VU60532 - Missing release of memory after effective lifetime CVE-2021-37205	CWE-401	Medium	No	No	-	11.02.2022	SB2022021105
#VU60531 - Operation on a Resource after Expiration or Release CVE-2021-37204	CWE-672	Medium	No	No	-	11.02.2022	SB2022021105
#VU60530 - Operation on a Resource after Expiration or Release CVE-2021-37185	CWE-672	Medium	No	No	-	11.02.2022	SB2022021105
#VU55778 - Improper Authorization CVE-2020-28397	CWE-285	Medium	No	No	-	11.08.2021	SB2021081110
#VU54204 - Observable discrepancy CVE-2020-24512	CWE-203	Low	No	No	-	17.06.2021	SB2021061716 SB2021061808 SB2021062119 and 35 more
#VU54203 - Exposure of sensitive information to an unauthorized actor CVE-2020-24511	CWE-200	Low	No	No	-	17.06.2021	SB2021061716 SB2021061808 SB2021062119 and 35 more
#VU54199 - Out-of-bounds read CVE-2020-24506	CWE-125	Low	No	No	-	17.06.2021	SB2021061712 SB2021081109 SB2022111726 and 1 more
#VU54196 - Exposure of sensitive information to an unauthorized actor CVE-2020-24507	CWE-200	Low	No	No	-	17.06.2021	SB2021061712 SB2021081109 SB2022111726 and 1 more
#VU54195 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-8704	CWE-362	Low	No	No	-	17.06.2021	SB2021061712 SB2021081109 SB2023032421
#VU54168 - Improper input validation CVE-2020-24486	CWE-20	Low	No	No	-	16.06.2021	SB2021061616 SB2021081109 SB2022101420 and 2 more
#VU54167 - Out-of-bounds read CVE-2020-12360	CWE-125	Low	No	No	-	16.06.2021	SB2021061616 SB2021081109 SB2022101420 and 2 more
#VU54165 - Memory corruption CVE-2020-12358	CWE-119	Low	No	No	-	16.06.2021	SB2021061616 SB2021081109 SB2022101420 and 2 more
#VU54161 - Improper Initialization CVE-2020-12357	CWE-665	Low	No	No	-	16.06.2021	SB2021061616 SB2021081109 SB2022101817

Showing elements 1 - 20 out of 26

Known vulnerabilities in SIMATIC ET 200SP Open Controller CPU 1515SP PC2

Breakdown by Severity Chart

Vulnerabilities (26)

Please verify you're human