GCVE - cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Simatic Ipc847D Firmware (`a8bae0a1-4ac4-58df-8bda-444cc72b518a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-23588`	vulnerable	2026-06-08 05:56:03.727702	Details available MEDIUM (6.2) A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC647D (All versions), SIMATIC IPC647E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC847D (All versions), SIMATIC IPC847E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows). The Adaptec Maxview application on affected devices is using a non-unique TLS certificate across installations to protect the communication from the local browser to the local application. A local attacker may use this key to decrypt intercepted local traffic between the browser and the application and could perform a man-in-the-middle attack in order to modify data in transit. Published: 2023-04-11T09:03:01.130Z Updated: 2024-10-15T17:12:13.841Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-511182.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-0543`	vulnerable	2026-06-08 05:14:35.860998	Details available Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Published: 2020-06-15T13:55:00.000Z Updated: 2024-08-04T06:02:52.330Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00320.html https://usn.ubuntu.com/4385-1/ https://usn.ubuntu.com/4388-1/ http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.html https://usn.ubuntu.com/4392-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3658`	vulnerable	2026-06-08 05:11:40.736211	Details available Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access. Published: 2018-09-12T19:00:00.000Z Updated: 2024-09-16T22:35:54.845Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html http://www.securityfocus.com/bid/106996 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3657`	vulnerable	2026-06-08 05:11:40.734919	Details available Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access. Published: 2018-09-12T19:00:00.000Z Updated: 2024-09-16T20:01:21.908Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html http://www.securityfocus.com/bid/106996 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3639`	vulnerable	2026-06-08 05:11:40.507424	Details available Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. Published: 2018-05-22T12:00:00.000Z Updated: 2026-05-29T20:14:05.872Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2018:1689 https://access.redhat.com/errata/RHSA-2018:2162 https://access.redhat.com/errata/RHSA-2018:1641 https://usn.ubuntu.com/3680-1/ https://access.redhat.com/errata/RHSA-2018:1997	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3616`	vulnerable	2026-06-08 05:11:39.250435	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5712`	vulnerable	2026-06-08 05:09:48.679327	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5711`	vulnerable	2026-06-08 05:09:48.659853	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5689`	vulnerable	2026-06-08 05:09:47.913065	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.