Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic S7 Plcsim Advanced Firmware (24b2544b-d0cf-5a73-86b5-c404df57ec6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46156 vulnerable 2026-06-08 06:12:44.221111 Details available
HIGH (7.5)
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
Published: 2023-12-12T11:27:10.086Z
Updated: 2026-02-25T16:34:35.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28831 vulnerable 2026-06-08 06:02:36.430147 Details available
HIGH (7.5)
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Published: 2023-09-12T09:32:06.153Z
Updated: 2025-11-11T20:20:09.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38465 vulnerable 2026-06-08 05:47:16.517949 Details available
CRITICAL (9.3)
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.
Published: 2022-10-11T00:00:00.000Z
Updated: 2025-04-21T13:48:21.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44695 vulnerable 2026-06-08 05:36:46.718509 Details available
MEDIUM (4.9)
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:45:22.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44694 vulnerable 2026-06-08 05:36:46.701042 Details available
MEDIUM (5.5)
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:45:31.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44693 vulnerable 2026-06-08 05:36:46.545568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40365 vulnerable 2026-06-08 05:35:17.673529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37205 vulnerable 2026-06-08 05:32:53.753420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37204 vulnerable 2026-06-08 05:32:53.747123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37185 vulnerable 2026-06-08 05:32:53.617315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.