Simatic Ipc427e (Siemens) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-06-10. Vendor: Siemens.

CVEs of Simatic Ipc427e

• CVE-2025-2884 - CVSS 6.6 (medium), 2025-06-10: TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme…
• CVE-2024-56181 - CVSS 8.4 (high), 2025-03-11: A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions <…
• CVE-2024-56182 - CVSS 8.4 (high), 2025-03-11: A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions <…
• CVE-2022-21198 - CVSS 7.9 (high), 2022-11-11: Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2021-41839 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory…
• CVE-2021-42059 - CVSS 6.7 (medium), 2022-02-03: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41,…
• CVE-2021-42554 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before…
• CVE-2022-24030 - CVSS 7.5 (high), 2022-02-03: An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write…
• CVE-2021-41838 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the…
• CVE-2021-41841 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System…
• CVE-2021-42113 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before…
• CVE-2021-43615 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and…
• CVE-2021-41837 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory…
• CVE-2021-41840 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the…
• CVE-2021-42060 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before…
• CVE-2021-43323 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1…
• CVE-2022-24031 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write…
• CVE-2021-33625 - CVSS 7.5 (high), 2022-02-03: An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the…
• CVE-2021-33627 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11,…
• CVE-2020-5953 - CVSS 7.5 (high), 2022-02-03: A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT…
• CVE-2021-43522 - CVSS 7.5 (high), 2022-02-03: An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A…
• CVE-2022-24069 - CVSS 8.2 (high), 2022-02-03: An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35.29, 5.4…
• CVE-2021-45971 - CVSS 8.2 (high), 2022-01-06: An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25,…
• CVE-2021-45969 - CVSS 8.2 (high), 2022-01-05: An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and…
• CVE-2021-45970 - CVSS 8.2 (high), 2022-01-05: An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and…
• CVE-2021-33626 - CVSS 7.8 (high), 2021-10-01: A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer…
• CVE-2020-27339 - CVSS 6.7 (medium), 2021-06-16: In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to…