Simatic Field Pg M5 Firmware (Siemens) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2022-02-03. Vendor: Siemens.

CVEs of Simatic Field Pg M5 Firmware

• CVE-2021-42059 - CVSS 6.7 (medium), 2022-02-03: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41,…
• CVE-2021-41838 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the…
• CVE-2021-41837 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory…
• CVE-2021-42554 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before…
• CVE-2021-33627 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11,…
• CVE-2021-33625 - CVSS 7.5 (high), 2022-02-03: An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the…
• CVE-2020-5953 - CVSS 7.5 (high), 2022-02-03: A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT…
• CVE-2021-33626 - CVSS 7.8 (high), 2021-10-01: A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer…
• CVE-2020-27339 - CVSS 6.7 (medium), 2021-06-16: In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to…
• CVE-2020-8704 - CVSS 6.4 (medium), 2021-06-09: Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via…
• CVE-2020-8703 - CVSS 6.7 (medium), 2021-06-09: Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and…
• CVE-2020-24507 - CVSS 4.4 (medium), 2021-06-09: Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32,…
• CVE-2020-8745 - CVSS 6.8 (medium), 2020-11-12: Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and…
• CVE-2020-8698 - CVSS 5.5 (medium), 2020-11-12: Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…
• CVE-2020-0543 - CVSS 5.5 (medium), 2020-06-15: Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable…
• CVE-2018-3616 - CVSS 5.9 (medium), 2018-09-12: Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to…
• CVE-2018-3658 - CVSS 5.3 (medium), 2018-09-12: Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially…
• CVE-2018-3657 - CVSS 6.7 (medium), 2018-09-12: Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code…
• CVE-2018-3639 - CVSS 5.5 (medium), 2018-05-22: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…
• CVE-2017-5711 - CVSS 7.8 (high), 2017-11-21: Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow…
• CVE-2017-5712 - CVSS 7.2 (high), 2017-11-21: Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with…
• CVE-2017-5689 - CVSS 9.8 (critical), 2017-05-02: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel…