[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f39S_BL-pTlr7FKOvg4B-MOs1kJiVFSHfWiwQBNZKfds":3,"g5a-ex:siemens\u002Fsimatic_ipc477e_pro_firmware@*":103,"g5a-family:siemens\u002Fsimatic_ipc477e_pro_firmware":105},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":80,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"siemens","simatic_ipc477e_pro_firmware",3,12,0,"2022-02-03",[14,17,19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"21.01.09",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"21.01.14",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"21.01.15","Simatic Ipc477e Pro Firmware by Siemens is a technology product with 3 tracked versions and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},[27,35,40,45,51,55,60,66,72,76],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":34},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","2018-05-22",5.5,"v3.1","Medium",0.60631,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":39},"CVE-2020-0543","Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","2020-06-15",0.0054,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":44},"CVE-2020-8698","Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","2020-11-12",0.00516,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":50},"CVE-2020-12357","Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.","2021-06-09",6.7,0.00346,{"cveId":52,"description":53,"publishedDate":48,"cvssScore":49,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":54},"CVE-2020-8703","Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.",0.00333,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":49,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":59},"CVE-2020-27339","In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).","2021-06-16",0.00317,{"cveId":61,"description":62,"publishedDate":12,"cvssScore":63,"cvssVersion":32,"severity":64,"isKev":16,"epssScore":65},"CVE-2021-33625","An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.",7.5,"High",0.00315,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":32,"severity":64,"isKev":16,"epssScore":71},"CVE-2021-33626","A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.","2021-10-01",7.8,0.00308,{"cveId":73,"description":74,"publishedDate":12,"cvssScore":63,"cvssVersion":32,"severity":64,"isKev":16,"epssScore":75},"CVE-2020-5953","A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).",0.00284,{"cveId":77,"description":78,"publishedDate":48,"cvssScore":79,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":75},"CVE-2020-24507","Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.",4.4,[],{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Simatic Ipc477e Pro Firmware by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Ipc477e Pro Firmware by Siemens covering 3 versions with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Ipc477e Pro Firmware vulnerabilities, Simatic Ipc477e Pro Firmware security, Simatic Ipc477e Pro Firmware CVE, Siemens Simatic Ipc477e Pro Firmware, Simatic Ipc477e Pro Firmware threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Ipc477e Pro Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_ipc477e_pro_firmware",{"@type":91,"name":92,"url":93},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","3 versions tracked",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Ipc477e Pro Firmware Security Vulnerabilities","Security vulnerabilities affecting Simatic Ipc477e Pro Firmware by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":101,"apiVersion":102},"2026-10-18T21:45:17.079Z","3.0",{"rows":104,"total":11,"capped":16,"failed":11},[],[]]