Vulnerabilities > Siemens > Sinamics Gl150 Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-05-12 CVE-2021-27383 Allocation of Resources Without Limits or Throttling vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
network
low complexity
siemens CWE-770
7.5
2021-05-12 CVE-2021-27384 Access of Memory Location After End of Buffer vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
network
low complexity
siemens CWE-788
critical
9.8
2021-05-12 CVE-2021-27385 Infinite Loop vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
network
low complexity
siemens CWE-835
7.5
2021-05-12 CVE-2021-27386 Memory Leak vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
network
low complexity
siemens CWE-401
7.5
2021-02-09 CVE-2020-15798 Missing Authentication for Critical Function vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl.
network
low complexity
siemens CWE-306
critical
9.8
2019-10-10 CVE-2019-10936 Resource Exhaustion vulnerability in Siemens products
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
network
low complexity
siemens CWE-400
7.5
2019-10-10 CVE-2019-10923 Resource Exhaustion vulnerability in Siemens products
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
network
low complexity
siemens CWE-400
7.5
2019-04-17 CVE-2019-6568 Out-of-bounds Read vulnerability in Siemens products
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.
network
low complexity
siemens CWE-125
7.5
2017-05-11 CVE-2017-2680 Resource Exhaustion vulnerability in Siemens products
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).
low complexity
siemens CWE-400
6.5