SIMATIC PC-Station Plus

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-47375	Siemens Foundation SIPLUS S7-400 CPU 414-3 PN/DP	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374	Siemens Foundation SIPLUS S7-400 CPU 414-3 PN/DP	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-30694	Siemens Foundation web services	Med	0.42	6.5	0.00	Nov 8, 2022	The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

CVE-2022-47375HigDec 12, 2023
Siemens Foundation
SIPLUS S7-400 CPU 414-3 PN/DP
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374HigDec 12, 2023
Siemens Foundation
SIPLUS S7-400 CPU 414-3 PN/DP
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-30694MedNov 8, 2022
Siemens Foundation
web services
risk 0.42cvss 6.5epss 0.00
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.