Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-08	CVE-2022-30694	Cross-Site Request Forgery (CSRF) vulnerability in Siemens products The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack. network low complexity siemens CWE-352	6.5
2019-08-13	CVE-2019-10929	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Siemens products A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. network high complexity siemens CWE-327	5.9