Simatic S7 400 CPU Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2016-12-17	CVE-2016-9159	Information Exposure vulnerability in Siemens products A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. network siemens CWE-200	4.3
2016-12-17	CVE-2016-9158	Improper Input Validation vulnerability in Siemens products A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. network low complexity siemens CWE-20	7.8
2016-11-23	CVE-2016-8673	Cross-Site Request Forgery (CSRF) vulnerability in Siemens products A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. network siemens CWE-352	6.8
2016-11-23	CVE-2016-8672	Information Exposure vulnerability in Siemens products A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. network low complexity siemens CWE-200	5.0
2012-07-31	CVE-2012-3017	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Siemens products Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets. network low complexity siemens CWE-119	7.8
2012-07-31	CVE-2012-3016	Unspecified vulnerability in Siemens products Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets. network low complexity siemens	7.8