Simatic Mv550 S
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_mv550_s:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic Mv550 S (b753baa5-e615-525a-aa87-aecedad76a3a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-36521 |
vulnerable | 2026-06-08 06:08:12.147638 |
Details available
HIGH (8.6)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a
vulnerability that may lead to a denial of service condition. An attacker may
cause a denial of service situation of all socket-based communication of the
affected products if the result server is enabled.
Published: 2023-07-11T09:07:13.637Z
Updated: 2024-11-21T14:09:57.839Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35921 |
vulnerable | 2026-06-08 06:06:28.158452 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted Ethernet frames sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.
Published: 2023-07-11T09:07:09.314Z
Updated: 2024-11-13T14:28:33.242Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35920 |
vulnerable | 2026-06-08 06:06:28.150380 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.
Published: 2023-07-11T09:07:08.275Z
Updated: 2024-11-12T16:53:53.862Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33138 |
vulnerable | 2026-06-08 05:44:46.274585 |
Details available
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.
Published: 2022-07-12T10:06:46.000Z
Updated: 2024-08-03T08:01:19.531Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33137 |
vulnerable | 2026-06-08 05:44:46.264975 |
Details available
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.
Published: 2022-07-12T10:06:44.000Z
Updated: 2024-08-03T08:01:19.904Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0778 |
vulnerable | 2026-06-08 05:39:11.032586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28400 |
vulnerable | 2026-06-08 05:23:54.584774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.