GCVE - cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Simatic Ipc477E Firmware (`6ed4c581-c352-5a95-8d43-5debacb98c1b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33626`	vulnerable	2026-06-08 05:32:11.921877	Details available A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution. Published: 2021-10-01T02:21:29.000Z Updated: 2025-11-04T19:12:30.965Z Open on db.gcve.eu Reference links https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2021001 https://security.netapp.com/advisory/ntap-20220216-0006/ https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33625`	vulnerable	2026-06-08 05:32:11.910254	Details available An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses. Published: 2022-02-03T01:55:10.000Z Updated: 2025-11-04T19:12:29.871Z Open on db.gcve.eu Reference links https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022014 https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf https://security.netapp.com/advisory/ntap-20220222-0004/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5953`	vulnerable	2026-06-08 05:26:44.340977	Details available A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2). Published: 2022-02-03T01:00:57.000Z Updated: 2025-11-04T19:12:23.190Z Open on db.gcve.eu Reference links https://www.insyde.com/products https://www.insyde.com/security-pledge https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf https://security.netapp.com/advisory/ntap-20220222-0005/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27339`	vulnerable	2026-06-08 05:23:52.598700	Details available In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5). Published: 2021-06-16T15:49:34.000Z Updated: 2025-11-04T19:12:22.115Z Open on db.gcve.eu Reference links https://www.insyde.com/security-pledge/SA-2021001 https://security.netapp.com/advisory/ntap-20220216-0005/ https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.