SIMATIC PC-Station Plus

CVEs (3)

CVE	Vendor / Product	CVSS	EPSS	Published	Description
CVE-2022-47375	Siemens Foundation SINAMICS S120 (incl. SIPLUS variants)	—	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374	Siemens Foundation SINAMICS S120 (incl. SIPLUS variants)	—	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-30694	Siemens Foundation Sinec Nms	—	0.00	Nov 8, 2022	The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

CVE-2022-47375Dec 12, 2023
Siemens Foundation
SINAMICS S120 (incl. SIPLUS variants)
risk 0.00cvss —epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374Dec 12, 2023
Siemens Foundation
SINAMICS S120 (incl. SIPLUS variants)
risk 0.00cvss —epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-30694Nov 8, 2022
Siemens Foundation
Sinec Nms
risk 0.00cvss —epss 0.00
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.