Approved changes feed: RSS · Atom

cpe:2.3:a:siemens_ag:simatic_tdc_cp51m1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens Ag (6b4625df-dd28-5c6a-8569-4e99d778ef77)
ProductSimatic Tdc Cp51M1 (685b2646-9f6c-58ca-828c-061f848a2401)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18336 vulnerable 2026-06-08 05:13:11.390740 Details available
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2020-03-10T19:16:17.000Z
Updated: 2026-06-02T18:36:21.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10937 vulnerable 2026-06-08 05:12:25.916111 Details available
A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2019-09-13T16:38:32.000Z
Updated: 2024-08-04T22:40:15.243Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.