Known vulnerabilities in SIMATIC MV550 H

Vendor: Siemens
Software: SIMATIC MV550 H
Software CPE: cpe:2.3:h:siemens:simatic_mv550_h:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 16
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC MV550 H SIMATIC MV550 H is affected by 16 known vulnerabilities: 5 high, 11 medium Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78233 - Allocation of Resources Without Limits or Throttling
CVE-2023-36521		 CWE-770 High
No
No
 3.3.4 13.07.2023 SB2023071324
#VU78232 - Resource exhaustion
CVE-2023-35921		 CWE-400 Medium
No
No
 3.3.4 13.07.2023 SB2023071324
#VU78231 - Resource exhaustion
CVE-2023-35920		 CWE-400 Medium
No
No
 3.3.4 13.07.2023 SB2023071324
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 3.3.4 23.03.2023 SB2023032314
SB2023032315
SB2023042510
and 22 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 3.3.4 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 3.3.4 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 3.3.4 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 3.3.4 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU66476 - Improper input validation
CVE-2022-36946		 CWE-20 Medium
Available
No
 3.3.4 13.08.2022 SB2022081305
SB2022081647
SB2022081739
and 73 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 3.3.4 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU66152 - Resource exhaustion
CVE-2021-46828		 CWE-400 Medium
No
No
 3.3.4 07.08.2022 SB2022080701
SB2022080703
SB2022090161
and 20 more
#VU65263 - Missing Authentication for Critical Function
CVE-2022-33138		 CWE-306 Medium
No
No
 3.3 13.07.2022 SB2022071324
#VU65261 - Insufficient Session Expiration
CVE-2022-33137		 CWE-613 Medium
No
No
 3.3 13.07.2022 SB2022071324
#VU64420 - Memory corruption
CVE-2022-30767		 CWE-119 High
No
No
 3.3.4 15.06.2022 SB2022061559
SB2022061575
SB2022061576
and 5 more
#VU64419 - Out-of-bounds write
CVE-2019-14196		 CWE-787 High
No
No
 3.3.4 15.06.2022 SB2019073118
SB2023071324
SB2022101446
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012		 CWE-401 Medium
No
No
 3.3.4 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more