Vulnerabilities > Siemens > Simatic S7 1500 CPU 1511 1 PN Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-01-10 CVE-2022-38773 Unspecified vulnerability in Siemens products
Affected devices do not contain an Immutable Root of Trust in Hardware.
low complexity
siemens
6.8
2022-12-13 CVE-2021-44693 Improper Validation of Specified Quantity in Input vulnerability in Siemens products
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
network
low complexity
siemens CWE-1284
4.9
2022-12-13 CVE-2021-44694 Improper Validation of Specified Type of Input vulnerability in Siemens products
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
network
low complexity
siemens CWE-1287
5.5
2022-12-13 CVE-2021-44695 Improper Validation of Syntactic Correctness of Input vulnerability in Siemens products
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
network
low complexity
siemens CWE-1286
4.9
2022-11-08 CVE-2022-30694 Cross-Site Request Forgery (CSRF) vulnerability in Siemens products
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
network
low complexity
siemens CWE-352
6.5