Known vulnerabilities in SIMOTICS CONNECT 400

Vendor: Siemens
Software: SIMOTICS CONNECT 400
Software CPE: cpe:2.3:h:siemens:simotics_connect_400:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMOTICS CONNECT 400 SIMOTICS CONNECT 400 is affected by 10 known vulnerabilities: 2 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58090 - Improper input validation
CVE-2021-31890		 CWE-20 High
No
No
 1.0.0.0 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58089 - Integer overflow
CVE-2021-31889		 CWE-190 Medium
No
No
 0.5.0.0 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58080 - Improper input validation
CVE-2021-31346		 CWE-20 High
No
No
 1.0.0.0 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 3 more
#VU58078 - Type confusion
CVE-2021-31344		 CWE-843 Medium
No
No
 1.0.0.0 10.11.2021 SB2021111002
SB2021111003
SB2021121648
and 2 more
#VU52206 - Access of Memory Location After End of Buffer
CVE-2020-27738		 CWE-788 Medium
No
No
 0.5.0.0 14.04.2021 SB2021041407
SB2021041515
#VU52205 - Out-of-bounds read
CVE-2020-27737		 CWE-125 Medium
No
No
 0.5.0.0 14.04.2021 SB2021041407
SB2021041515
#VU52204 - Improper Null Termination
CVE-2020-27736		 CWE-170 Medium
No
No
 0.5.0.0 14.04.2021 SB2021041407
SB2021041515
#VU52203 - Access of Memory Location After End of Buffer
CVE-2021-25677		 CWE-788 Medium
No
No
 - 14.04.2021 SB2021041406
SB2021041516
#VU26962 - Business Logic Errors (3.0)
CVE-2019-13939		 CWE-840 Low
No
No
 0.3.0.330 15.04.2020 SB2020041516
#VU25646 - Inadequate Encryption Strength
CVE-2019-15126		 CWE-326 Low
Available
No
 - 27.02.2020 SB2020022705
SB2020081258
SB2021121353
and 3 more