Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinamics S120 (4891ed42-29c2-5407-a338-cec9ac67338d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47375 not_vulnerable 2026-06-08 05:50:40.250100 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
Published: 2023-12-12T11:25:32.533Z
Updated: 2024-08-03T14:55:07.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47374 not_vulnerable 2026-06-08 05:50:40.245472 Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly. This could allow an attacker to exhaust system resources and create a denial of service condition for the device.
Published: 2023-12-12T11:25:31.314Z
Updated: 2026-02-25T16:34:35.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6568 not_vulnerable 2026-06-08 05:14:12.158407 Details available
HIGH (7.5)
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
Published: 2019-04-17T13:40:24.000Z
Updated: 2026-06-03T13:29:34.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10936 not_vulnerable 2026-06-08 05:12:25.912090 Details available
HIGH (7.5)
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Published: 2019-10-10T00:00:00.000Z
Updated: 2024-08-04T22:40:15.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10936 vulnerable 2026-06-08 05:12:25.830774 Details available
HIGH (7.5)
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Published: 2019-10-10T00:00:00.000Z
Updated: 2024-08-04T22:40:15.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10923 not_vulnerable 2026-06-08 05:12:25.675505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2681 not_vulnerable 2026-06-08 05:09:25.302442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2680 not_vulnerable 2026-06-08 05:09:25.220723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12741 not_vulnerable 2026-06-08 05:08:47.821807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6920 vulnerable 2026-06-08 05:05:07.351884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.