Simatic S7 300 Cpu 317 2 Pn/Dp
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_s7-300_cpu_317-2_pn/dp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic S7 300 Cpu 317 2 Pn/Dp (f6a49f53-ce8c-5a91-a5ed-876a995d389d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40833 |
vulnerable | 2026-06-08 07:25:06.187899 |
Details available
HIGH (7.5)
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Published: 2026-05-12T08:20:46.879Z
Updated: 2026-07-14T09:19:07.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40820 |
vulnerable | 2026-06-08 07:25:05.921736 |
Details available
HIGH (7.5)
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Published: 2025-12-09T10:44:30.977Z
Updated: 2025-12-09T15:55:23.400Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23814 |
vulnerable | 2026-06-08 06:29:40.575795 |
Details available
MEDIUM (5.3)
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.
Published: 2025-02-11T10:28:33.403Z
Updated: 2025-07-10T10:53:47.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30694 |
vulnerable | 2026-06-08 05:43:38.825897 |
Details available
MEDIUM (6.5)
The login endpoint /FormLogin in affected web services does not apply proper origin checking.
This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25622 |
vulnerable | 2026-06-08 05:41:46.109752 |
Details available
MEDIUM (5.3)
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Published: 2022-04-12T00:00:00.000Z
Updated: 2025-04-21T13:54:36.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6568 |
vulnerable | 2026-06-08 05:14:12.051175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19300 |
vulnerable | 2026-06-08 05:13:21.964486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13940 |
vulnerable | 2026-06-08 05:12:52.600201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10936 |
vulnerable | 2026-06-08 05:12:25.849206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10923 |
vulnerable | 2026-06-08 05:12:25.580291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4843 |
vulnerable | 2026-06-08 05:11:49.752665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.