Known vulnerabilities in SIMATIC S7-1500 TM MFP - BIOS

Vendor: Siemens
Software CPE: cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_bios:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 TM MFP - BIOS SIMATIC S7-1500 TM MFP - BIOS is affected by 58 known vulnerabilities: 8 high, 11 medium, 39 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95093 - Improper input validation
CVE-2024-42154
CWE-20 Low
No
No
- 31.07.2024 SB20240731176
SB2024081301
SB2024081648
and 64 more
#VU95027 - Use of Uninitialized Resource
CVE-2024-42161
CWE-908 Low
No
No
- 31.07.2024 SB20240731110
SB2024080968
SB2024080969
and 30 more
#VU95010 - Double Free
CVE-2024-41046
CWE-415 Low
No
No
- 31.07.2024 SB2024073193
SB2024081301
SB2024081648
and 30 more
#VU94979 - NULL Pointer Dereference
CVE-2024-41055
CWE-476 Low
No
No
- 31.07.2024 SB2024073162
SB2024080968
SB2024080969
and 56 more
#VU94947 - Use After Free
CVE-2024-41049
CWE-416 Low
No
No
- 31.07.2024 SB2024073130
SB2024080967
SB2024080969
and 40 more
#VU71541 - Improper Access Control
CVE-2022-4662
CWE-284 Low
No
No
- 25.01.2023 SB2023012561
SB2023012565
SB2023012626
and 38 more
#VU70499 - Out-of-bounds read
CVE-2022-3435
CWE-125 Medium
No
No
- 27.12.2022 SB2022122717
SB2022122722
SB2022122723
and 48 more
#VU70442 - Stack-based buffer overflow
CVE-2022-4378
CWE-121 Low
No
No
- 20.12.2022 SB2022122008
SB2022122123
SB2022122124
and 124 more
#VU69708 - Use After Free
CVE-2022-3586
CWE-416 Low
No
No
- 29.11.2022 SB2022112976
SB2022113032
SB2022113033
and 75 more
#VU68108 - Use After Free
CVE-2022-1882
CWE-416 Low
No
No
- 11.10.2022 SB2022101107
SB2022101111
SB2022101505
and 12 more
#VU67866 - Out-of-bounds write
CVE-2022-20422
CWE-787 Low
No
No
- 04.10.2022 SB2022100403
SB2022111721
SB2022111722
and 15 more
#VU67865 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-20421
CWE-362 Low
Available
No
- 04.10.2022 SB2022100403
SB2022101994
SB2022120150
and 16 more
#VU67509 - Out-of-bounds read
CVE-2022-2905
CWE-125 Low
No
No
- 20.09.2022 SB2022092041
SB2022092046
SB2022092047
and 17 more
#VU67477 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-3028
CWE-362 Low
No
No
- 20.09.2022 SB2022092003
SB2022092006
SB2022092007
and 63 more
#VU66522 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21233
CWE-200 Low
No
No
- 16.08.2022 SB2022081610
SB2022081724
SB2022081725
and 20 more
#VU66397 - Double Free
CVE-2022-2588
CWE-415 Low
Available
Exploited
- 11.08.2022 SB2022081109
SB2022081110
SB2022081111
and 99 more
#VU66394 - Resource Management Errors
CVE-2022-2585
CWE-399 Low
Available
No
- 11.08.2022 SB2022081107
SB2022081114
SB2022081115
and 21 more
#VU61294 - Memory corruption
CVE-2022-23218
CWE-119 High
No
No
- 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU58685 - Use After Free
CVE-2021-42384
CWE-416 Low
No
No
- 08.12.2021 SB2021120809
SB2021120810
SB2022012015
and 16 more
#VU58678 - Use After Free
CVE-2021-42386
CWE-416 Low
No
No
- 08.12.2021 SB2021120809
SB2021120810
SB2022012015
and 16 more


Showing elements 1 - 20 out of 58