GCVE - cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Simatic Ipc477E Pro (`ae6a2dae-91b2-57bf-8a2d-7ed8a8fc69d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33626`	not_vulnerable	2026-06-08 05:32:11.922008	Details available A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution. Published: 2021-10-01T02:21:29.000Z Updated: 2025-11-04T19:12:30.965Z Open on db.gcve.eu Reference links https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2021001 https://security.netapp.com/advisory/ntap-20220216-0006/ https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33625`	not_vulnerable	2026-06-08 05:32:11.912082	Details available An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses. Published: 2022-02-03T01:55:10.000Z Updated: 2025-11-04T19:12:29.871Z Open on db.gcve.eu Reference links https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022014 https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf https://security.netapp.com/advisory/ntap-20220222-0004/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8745`	not_vulnerable	2026-06-08 05:27:19.547718	Details available Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Published: 2020-11-12T18:06:09.000Z Updated: 2024-08-04T10:12:09.559Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 https://security.netapp.com/advisory/ntap-20201113-0005/ https://security.netapp.com/advisory/ntap-20201113-0002/ https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8704`	not_vulnerable	2026-06-08 05:27:18.426870	Details available Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access. Published: 2021-06-09T18:47:41.000Z Updated: 2024-08-04T10:03:46.322Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8703`	not_vulnerable	2026-06-08 05:27:18.420740	Details available Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access. Published: 2021-06-09T18:48:39.000Z Updated: 2024-08-04T10:03:46.284Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html https://security.netapp.com/advisory/ntap-20210611-0004/ https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8698`	not_vulnerable	2026-06-08 05:27:18.202690	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8670`	not_vulnerable	2026-06-08 05:27:17.523684	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5953`	not_vulnerable	2026-06-08 05:26:44.330914	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27339`	not_vulnerable	2026-06-08 05:23:52.600612	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24507`	not_vulnerable	2026-06-08 05:22:34.219031	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12357`	not_vulnerable	2026-06-08 05:17:57.599479	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-0543`	not_vulnerable	2026-06-08 05:14:35.846278	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3639`	not_vulnerable	2026-06-08 05:11:40.498012	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.