Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_rtu3041c_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Rtu3041C Firmware (6d3b106a-eebc-593a-bb8b-eae382979b11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37186 vulnerable 2026-06-08 05:32:53.687326 Details available
A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.
Published: 2021-09-14T10:47:49.000Z
Updated: 2024-08-04T01:16:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36478 vulnerable 2026-06-08 05:25:48.945448 Details available
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
Published: 2021-08-23T00:00:00.000Z
Updated: 2024-08-04T17:30:07.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36475 vulnerable 2026-06-08 05:25:48.939536 Details available
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.
Published: 2021-08-23T00:00:00.000Z
Updated: 2024-08-04T17:30:08.223Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.