Known vulnerabilities in SIMATIC S7-1500 TM MFP - BIOS - page 3

Vendor: Siemens
Software: SIMATIC S7-1500 TM MFP - BIOS
Software CPE: cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_bios:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 TM MFP - BIOS SIMATIC S7-1500 TM MFP - BIOS is affected by 58 known vulnerabilities: 8 high, 11 medium, 39 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77475 - Incorrect Default Permissions
CVE-2021-20269		 CWE-276 Low
No
No
 - 16.06.2023 SB2022031041
SB2023061617
SB2022081308
and 2 more
#VU69653 - Release of invalid pointer or reference
CVE-2021-42377		 CWE-763 Medium
No
No
 - 28.11.2022 SB2021120809
SB2022112852
SB2022112855
and 8 more
#VU69652 - Improper input validation
CVE-2021-42375		 CWE-20 Low
No
No
 - 28.11.2022 SB2021120809
SB2022112852
SB2022112855
and 8 more
#VU69651 - NULL Pointer Dereference
CVE-2021-42373		 CWE-476 Medium
No
No
 - 28.11.2022 SB2021120809
SB2022112852
SB2022112855
and 8 more
#VU61293 - Off-by-one Error
CVE-2021-3999		 CWE-193 High
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 37 more
#VU61292 - Missing release of memory after effective lifetime
CVE-2021-3998		 CWE-401 Medium
No
No
 - 14.03.2022 SB2022031429
SB2022031430
SB2022030129
and 8 more
#VU59877 - NULL Pointer Dereference
CVE-2021-42376		 CWE-476 Low
No
No
 - 20.01.2022 SB2021120809
SB2022012015
SB2022112852
and 10 more
#VU58694 - Use After Free
CVE-2021-42380		 CWE-416 Low
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2021120727
and 15 more
#VU58692 - Use After Free
CVE-2021-42379		 CWE-416 Low
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2022012015
and 16 more
#VU58684 - Use After Free
CVE-2021-42382		 CWE-416 Low
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2021120727
and 15 more
#VU58680 - Use After Free
CVE-2021-42378		 CWE-416 Low
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2022012015
and 16 more
#VU58673 - Use After Free
CVE-2021-42381		 CWE-416 Low
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2021120727
and 15 more
#VU58670 - Out-of-bounds read
CVE-2021-42374		 CWE-125 Medium
No
No
 - 08.12.2021 SB2021120809
SB2021120810
SB2021120727
and 12 more
#VU55972 - Integer overflow
CVE-2021-35942		 CWE-190 Medium
No
No
 - 18.08.2021 SB2021081817
SB2021081818
SB2021100416
and 32 more
#VU55916 - NULL Pointer Dereference
CVE-2021-38604		 CWE-476 Medium
No
No
 - 17.08.2021 SB2021081710
SB2022081401
SB2023061617
and 4 more
#VU54560 - Use After Free
CVE-2021-33574		 CWE-416 High
No
No
 - 06.07.2021 SB2021070603
SB2021070604
SB2021092807
and 22 more
#VU51741 - Improper Handling of Exceptional Conditions
CVE-2021-28831		 CWE-755 Medium
No
No
 - 26.03.2021 SB2021032622
SB2021032626
SB2021032627
and 25 more
#VU50075 - Reachable Assertion
CVE-2021-3326		 CWE-617 Medium
No
No
 - 27.01.2021 SB2021012804
SB2021020710
SB2021020711
and 34 more


Showing elements 41 - 60 out of 58