Known vulnerabilities in SIMATIC NET CP 443-1 OPC UA

Vendor: Siemens
Software: SIMATIC NET CP 443-1 OPC UA
Software CPE: cpe:2.3:a:siemens:simatic_net_cp_443-1_opc_ua:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC NET CP 443-1 OPC UA SIMATIC NET CP 443-1 OPC UA is affected by 16 known vulnerabilities: 2 high, 12 medium, 2 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54031 - Out-of-bounds read
CVE-2016-2518		 CWE-125 Medium
No
No
 - 10.06.2021 SB2017013003
SB2021061008
#VU54030 - Exposure of sensitive information to an unauthorized actor
CVE-2016-1550		 CWE-200 Medium
No
No
 - 10.06.2021 SB2017010606
SB2021061008
#VU54029 - Improper input validation
CVE-2016-1547		 CWE-20 Medium
No
No
 - 10.06.2021 SB2017010605
SB2021061008
#VU54028 - Improper input validation
CVE-2016-4956		 CWE-20 Medium
No
No
 - 10.06.2021 SB2016070512
SB2021061008
#VU54027 - Data Handling
CVE-2016-1548		 CWE-19 Medium
No
No
 - 10.06.2021 SB2017010604
SB2021061008
#VU54026 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4955		 CWE-362 Medium
No
No
 - 10.06.2021 SB2016070511
SB2021061008
#VU54025 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4954		 CWE-362 Medium
No
No
 - 10.06.2021 SB2016070510
SB2021061008
#VU54024 - Improper Authentication
CVE-2016-4953		 CWE-287 Medium
No
No
 - 10.06.2021 SB2016070509
SB2021061008
#VU54023 - Memory corruption
CVE-2015-7853		 CWE-119 High
No
No
 - 10.06.2021 SB20170807112
SB2021061008
#VU54022 - Improper input validation
CVE-2015-8138		 CWE-20 Medium
No
No
 - 10.06.2021 SB2017013002
SB2021061008
#VU37084 - Improper input validation
CVE-2016-9042		 CWE-20 Medium
No
No
 - 04.06.2018 SB2017042202
SB2021061008
SB2023050302
and 1 more
#VU12304 - Incorrect Calculation
CVE-2016-7433		 CWE-682 Medium
No
No
 - 30.04.2018 SB2017010405
SB2017020603
SB2016112601
and 4 more
#VU7386 - Buffer overflow
CVE-2017-6458		 CWE-120 Low
No
No
 - 07.07.2017 SB2017070612
SB2017042007
SB2017042202
and 5 more
#VU6515 - Stack-based buffer overflow
CVE-2017-6548		 CWE-121 High
Available
No
 - 11.05.2017 SB2017051103
SB2021061008
#VU39824 - Improper input validation
CVE-2016-7431		 CWE-20 Medium
No
No
 - 13.01.2017 SB2017011319
SB2016112601
SB2021061008
#VU624 - Improper Access Control
CVE-2015-7705		 CWE-284 Low
No
No
 - 22.09.2016 SB2021061008