SIMATIC Field PG M5

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical0high8medium1low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8694US	medium5.5	0.45% (39th)	Exploit	no fix	2020-11-12	—
CVE-2020-0543US	medium5.5	0.54% (45th)	—	no fix	2020-06-15	—
CVE-2020-8698US	medium5.5	0.52% (44th)	—	no fix	2020-11-12	—
CVE-2020-8745US	medium6.8	0.38% (32nd)	—	no fix	2020-11-12	—
CVE-2020-24512US	low3.3OT elevated	0.38% (32nd)	—	no fix	2021-06-09	—
CVE-2020-8703US	medium6.7OT elevated	0.33% (26th)	—	no fix	2021-06-09	—
CVE-2020-24507US	medium4.4OT elevated	0.28% (21st)	—	no fix	2021-06-09	—
CVE-2025-2884US	—	0.26% (17th)	—	no fix	2025-06-10	—
CVE-2020-8704US	medium6.4OT elevated	0.21% (11th)	—	no fix	2021-06-09	—
CVE-2022-21198US	medium6.4	0.15% (4th)	—	no fix	2022-11-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-311Missing Encryption of Sensitive Data4 CVEs
CWE-1189Improper Isolation of Shared Resources on System-on-a-Chip (SoC)1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-1395Dependency on Vulnerable Third-Party Component1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.