Sinamics S120 (Incl. Siplus Variants)
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinamics_s120_(incl._siplus_variants):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinamics S120 (Incl. Siplus Variants) (db732b68-8a65-5bec-9172-f42692af48c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40833 |
vulnerable | 2026-06-08 07:25:06.207911 |
Details available
HIGH (7.5)
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Published: 2026-05-12T08:20:46.879Z
Updated: 2026-07-14T09:19:07.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47375 |
vulnerable | 2026-06-08 05:50:40.248240 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly.
This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
Published: 2023-12-12T11:25:32.533Z
Updated: 2024-08-03T14:55:07.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47374 |
vulnerable | 2026-06-08 05:50:40.219789 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly.
This could allow an attacker to exhaust system resources and create a denial of service condition for the device.
Published: 2023-12-12T11:25:31.314Z
Updated: 2026-02-25T16:34:35.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25622 |
vulnerable | 2026-06-08 05:41:46.130077 |
Details available
MEDIUM (5.3)
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Published: 2022-04-12T00:00:00.000Z
Updated: 2025-04-21T13:54:36.799Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.