Simotics Connect 400
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simotics_connect_400:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simotics Connect 400 (42038dc8-3c01-5db0-9876-7eed9bdd98a4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-31890 |
vulnerable | 2026-06-08 05:31:54.138716 |
Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0017)
Published: 2021-11-09T11:32:02.000Z
Updated: 2025-03-11T09:47:46.741Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31889 |
vulnerable | 2026-06-08 05:31:54.137781 |
Details available
HIGH (7.5)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015)
Published: 2021-11-09T11:32:01.000Z
Updated: 2025-03-11T09:47:45.226Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31346 |
vulnerable | 2026-06-08 05:31:52.437962 |
Details available
HIGH (8.2)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an ICMP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0007)
Published: 2021-11-09T11:31:53.000Z
Updated: 2025-03-11T09:47:39.488Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31344 |
vulnerable | 2026-06-08 05:31:52.423973 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). ICMP echo packets with fake IP options allow sending ICMP echo reply messages to arbitrary hosts on the network. (FSMD-2021-0004)
Published: 2021-11-09T11:31:51.000Z
Updated: 2025-03-11T09:47:36.591Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25677 |
vulnerable | 2026-06-08 05:30:41.486547 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving.
Published: 2021-04-22T20:42:21.000Z
Updated: 2024-08-03T20:11:28.339Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27738 |
vulnerable | 2026-06-08 05:23:53.089352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27737 |
vulnerable | 2026-06-08 05:23:53.088242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27736 |
vulnerable | 2026-06-08 05:23:53.084959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13939 |
vulnerable | 2026-06-08 05:12:52.555479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.