Known vulnerabilities in SIMATIC S7-PLCSIM Advanced

Vendor: Siemens

Software: SIMATIC S7-PLCSIM Advanced

Software CPE: cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84383 - Use After Free CVE-2023-46156	CWE-416	Medium	No	No	6.0	13.12.2023	SB2023121330 SB2023121523
#VU80852 - Integer overflow CVE-2023-28831	CWE-190	Medium	No	No	-	18.09.2023	SB2023091816 SB2023121343
#VU70376 - Improper input validation CVE-2021-44695	CWE-20	Low	No	No	5.0	15.12.2022	SB2022121520
#VU70375 - Improper input validation CVE-2021-44694	CWE-20	Low	No	No	5.0	15.12.2022	SB2022121520
#VU70374 - Improper input validation CVE-2021-44693	CWE-20	Low	No	No	5.0	15.12.2022	SB2022121520
#VU70373 - Improper input validation CVE-2021-40365	CWE-20	Medium	No	No	5.0	15.12.2022	SB2022121520
#VU68263 - Insufficiently Protected Credentials CVE-2022-38465	CWE-522	Low	No	No	4.0	12.10.2022	SB2022101249
#VU60532 - Missing release of memory after effective lifetime CVE-2021-37205	CWE-401	Medium	No	No	-	11.02.2022	SB2022021105
#VU60531 - Operation on a Resource after Expiration or Release CVE-2021-37204	CWE-672	Medium	No	No	-	11.02.2022	SB2022021105
#VU60530 - Operation on a Resource after Expiration or Release CVE-2021-37185	CWE-672	Medium	No	No	-	11.02.2022	SB2022021105
#VU55778 - Improper Authorization CVE-2020-28397	CWE-285	Medium	No	No	4.0	11.08.2021	SB2021081110
#VU53663 - Memory corruption CVE-2020-15782	CWE-119	High	No	No	4.0	31.05.2021	SB2021053102 SB2021071417 SB2021071418
#VU21970 - Improper Access Control CVE-2019-10943	CWE-284	Medium	No	No	-	21.10.2019	SB2019081348
#VU21969 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2019-10929	CWE-300	Low	No	No	-	21.10.2019	SB2019081348