Siemens SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)

Name: Siemens SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high10medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-0778US	high7.5	73.2% (99th)	Exploit	no fix	2022-03-15	≤ vers:all/*
CVE-2015-5621US	high7.5	38.3% (99th)	Exploit	no fix	2015-08-19	2 versions
CVE-2018-18065US	medium6.5	17.5% (97th)	Exploit	no fix	2018-10-08	2 versions
CVE-2016-4956US	medium5.3	16.4% (97th)	—	no fix	2016-07-05	≤ vers:all/*
CVE-2016-2518US	medium5.3	15.1% (97th)	—	no fix	2017-01-30	≤ vers:all/*
CVE-2015-7853US	critical9.8	11.8% (96th)	—	no fix	2017-08-07	≤ vers:all/*
CVE-2016-7433US	medium5.3	9.76% (96th)	—	no fix	2017-01-13	≤ vers:all/*
CVE-2016-7431US	medium5.3	8.88% (95th)	—	no fix	2017-01-13	≤ vers:all/*
CVE-2016-4955US	medium5.9	8.77% (95th)	—	no fix	2016-07-05	≤ vers:all/*
CVE-2017-6458US	high8.8	6.51% (94th)	—	no fix	2017-03-27	≤ vers:all/*
CVE-2016-9042US	medium5.9	3.91% (90th)	—	no fix	2018-06-04	≤ vers:all/*
CVE-2019-8460US	high7.5	2.25% (83rd)	—	no fix	2019-08-26	≤ vers:all/*
CVE-2019-13946US	high7.8	1.46% (73rd)	—	no fix	2020-02-11	2 versions
CVE-2019-6568US	medium5.0	1.40% (72nd)	—	no fix	2019-04-17	2 versions
CVE-2017-2680US	medium6.5	1.15% (67th)	—	no fix	2017-05-11	2 versions
CVE-2017-2681US	medium6.5	0.91% (60th)	—	no fix	2017-05-11	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation8 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-1049Excessive Data Query Operations in a Large Data Table1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1357Reliance on Insufficiently Trustworthy Component1 CVEs
CWE-1395Dependency on Vulnerable Third-Party Component1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.