Tim 1531 Irc Firmware

CVEs (19)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-13816	TIM TIM 1531 IRC	Cri	0.65	10.0	0.03	Dec 12, 2018	A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user…
CVE-2018-4841	Siemens Foundation TIM 1531 IRC	Cri	0.64	9.8	0.05	Mar 29, 2018	A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a…
CVE-2022-43768	Siemens Foundation SIMATIC CP 1242-7 V2	Hig	0.49	7.5	0.01	Apr 11, 2023	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2022-43767	Siemens Foundation SIMATIC CP 1242-7 V2	Hig	0.49	7.5	0.01	Apr 11, 2023	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2022-43716	Siemens Foundation SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL	Hig	0.49	7.5	0.01	Apr 11, 2023	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2021-40365	Siemens Foundation Simatic S7 1200 Firmware	Hig	0.49	7.5	0.01	Dec 13, 2022	Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-37205	Siemens Foundation TIM 1531 IRC	Hig	0.49	7.5	0.02	Feb 9, 2022	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions…
CVE-2021-37204	Siemens Foundation TIM 1531 IRC	Hig	0.49	7.5	0.02	Feb 9, 2022	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open…
CVE-2021-37185	Siemens Foundation TIM 1531 IRC	Hig	0.49	7.5	0.02	Feb 9, 2022	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions…
CVE-2020-27827	Openvswitch Openvswitch	Hig	0.49	7.5	0.03	Mar 18, 2021	A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
CVE-2020-8286	Curl Curl	Hig	0.49	7.5	0.05	Dec 14, 2020	curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8169	Curl Curl	Hig	0.49	7.5	0.03	Dec 14, 2020	curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
CVE-2019-6568	Siemens Foundation Wincc Runtime Advanced	Hig	0.49	7.5	0.01	Apr 17, 2019	The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited…
CVE-2021-3449	OpenSSL Project OpenSSL	Med	0.43	5.9	0.64	Mar 25, 2021	An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a…
CVE-2019-10929	Siemens Foundation Simatic Wincc Runtime	Med	0.38	5.9	0.01	Aug 13, 2019	A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl.…
CVE-2021-44694	Siemens Foundation Affected devices	Med	0.36	5.5	0.01	Dec 13, 2022	Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2020-28397	Siemens Foundation TIM 1531 IRC	Med	0.35	5.3	0.01	Aug 10, 2021	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl.…
CVE-2021-44695	Siemens Foundation Simatic S7 1200 Firmware	Med	0.32	4.9	0.01	Dec 13, 2022	Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-44693	Siemens Foundation Simatic S7 1200 Firmware	Med	0.32	4.9	0.01	Dec 13, 2022	Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVE-2018-13816CriDec 12, 2018
TIM
TIM 1531 IRC
risk 0.65cvss 10.0epss 0.03
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user…
CVE-2018-4841CriMar 29, 2018
Siemens Foundation
TIM 1531 IRC
risk 0.64cvss 9.8epss 0.05
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a…
CVE-2022-43768HigApr 11, 2023
Siemens Foundation
SIMATIC CP 1242-7 V2
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2022-43767HigApr 11, 2023
Siemens Foundation
SIMATIC CP 1242-7 V2
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2022-43716HigApr 11, 2023
Siemens Foundation
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl.…
CVE-2021-40365HigDec 13, 2022
Siemens Foundation
Simatic S7 1200 Firmware
risk 0.49cvss 7.5epss 0.01
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-37205HigFeb 9, 2022
Siemens Foundation
TIM 1531 IRC
risk 0.49cvss 7.5epss 0.02
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions…
CVE-2021-37204HigFeb 9, 2022
Siemens Foundation
TIM 1531 IRC
risk 0.49cvss 7.5epss 0.02
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open…
CVE-2021-37185HigFeb 9, 2022
Siemens Foundation
TIM 1531 IRC
risk 0.49cvss 7.5epss 0.02
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions…
CVE-2020-27827HigMar 18, 2021
Openvswitch
Openvswitch
risk 0.49cvss 7.5epss 0.03
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
CVE-2020-8286HigDec 14, 2020
Curl
Curl
risk 0.49cvss 7.5epss 0.05
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8169HigDec 14, 2020
Curl
Curl
risk 0.49cvss 7.5epss 0.03
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
CVE-2019-6568HigApr 17, 2019
Siemens Foundation
Wincc Runtime Advanced
risk 0.49cvss 7.5epss 0.01
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited…
CVE-2021-3449MedMar 25, 2021
OpenSSL Project
OpenSSL
risk 0.43cvss 5.9epss 0.64
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a…
CVE-2019-10929MedAug 13, 2019
Siemens Foundation
Simatic Wincc Runtime
risk 0.38cvss 5.9epss 0.01
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl.…
CVE-2021-44694MedDec 13, 2022
Siemens Foundation
Affected devices
risk 0.36cvss 5.5epss 0.01
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2020-28397MedAug 10, 2021
Siemens Foundation
TIM 1531 IRC
risk 0.35cvss 5.3epss 0.01
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl.…
CVE-2021-44695MedDec 13, 2022
Siemens Foundation
Simatic S7 1200 Firmware
risk 0.32cvss 4.9epss 0.01
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-44693MedDec 13, 2022
Siemens Foundation
Simatic S7 1200 Firmware
risk 0.32cvss 4.9epss 0.01
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.