https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:33:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-254908 EUVD-2026-254908 https://cve.radiocsirt.org/vuln/euvd-2026-254908 https://cve.radiocsirt.org/vuln/fkie_cve-2011-20001 <p>A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions &lt; V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions &lt; V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.</p> <p>A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions &lt; V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions &lt; V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-20001 https://cve.radiocsirt.org/vuln/ghsa-hfrj-93xv-cmrv <p>A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions &lt; V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions &lt; V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.</p> <p>A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions &lt; V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions &lt; V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.</p> https://cve.radiocsirt.org/vuln/ghsa-hfrj-93xv-cmrv https://cve.radiocsirt.org/vuln/icsa-25-294-03 <p>The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.</p> <p>The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.</p> https://cve.radiocsirt.org/vuln/icsa-25-294-03 https://cve.radiocsirt.org/vuln/ssa-625789 <p>The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.</p> <p>The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.</p> https://cve.radiocsirt.org/vuln/ssa-625789