Simatic S7-1500 Cpu 1518f-4 Pndp Mfp (Siemens) - vulnerabilities (CVEs)

1132 CVEs, 8 in the last 30 days, 2 known versions, newest CVE from 2026-10-13. Vendor: Siemens.

CVEs of Simatic S7-1500 Cpu 1518f-4 Pndp Mfp

CVE-2026-63357 - CVSS 6.1 (medium), 2026-10-13: Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This…
CVE-2026-63356 - CVSS 6.1 (medium), 2026-10-13: Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace…
CVE-2026-63355 - CVSS 6.1 (medium), 2026-10-13: Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This…
CVE-2026-63354 - CVSS 9.6 (critical), 2026-10-13: Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This…
CVE-2026-63353 - CVSS 9.6 (critical), 2026-10-13: Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an…
CVE-2026-63352 - CVSS 6.1 (medium), 2026-10-13: Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow…
CVE-2026-63351 - CVSS 6.1 (medium), 2026-10-13: Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on…
CVE-2026-63350 - CVSS 9.6 (critical), 2026-10-13: Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized…
CVE-2026-64560 - CVSS 7.8 (high), 2026-07-29: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded…
CVE-2026-64552 - CVSS 8.4 (high), 2026-07-27: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive_big() bounds the device-announced…
CVE-2026-64545 - CVSS 7.5 (high), 2026-07-27: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_redirect() xdp_master_redirect()…
CVE-2026-64538, 2026-07-27: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). fib6_nh_mtu_change() re-fetches idev via…
CVE-2026-64425 - CVSS 5.5 (medium), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item commit 10dc95939817…
CVE-2026-64423 - CVSS 7.8 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is…
CVE-2026-64422 - CVSS 7.1 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid…
CVE-2026-64413 - CVSS 7 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table…
CVE-2026-64411 - CVSS 7.1 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before find_table_lock() update_counters() and…
CVE-2026-64412 - CVSS 7.1 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the…
CVE-2026-64375 - CVSS 7.8 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get_link() and…
CVE-2026-64371 - CVSS 5.5 (medium), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where…
CVE-2026-64370 - CVSS 5.5 (medium), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In…
CVE-2026-64317 - CVSS 7.1 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record get_symlink_chunk() and the SL…
CVE-2026-64279 - CVSS 7.8 (high), 2026-07-25: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using…
CVE-2026-63810, 2026-07-19: In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem…
CVE-2026-53400 - CVSS 7.8 (high), 2026-07-19: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using…
CVE-2026-53352 - CVSS 4.7 (medium), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() When a multi-threaded…
CVE-2026-53295 - CVSS 5.5 (medium), 2026-06-26: In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array…
CVE-2026-53275 - CVSS 8.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query,…
CVE-2026-53269 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy…
CVE-2026-53268 - CVSS 8.2 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've…
CVE-2026-53249 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options This patch restricts setting Loose Source…
CVE-2026-53239 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix the race by…
CVE-2026-53236 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of…
CVE-2026-53223 - CVSS 7.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue skbs skb_is_err_queue() treats…
CVE-2026-53219 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The native and compat…
CVE-2026-53218 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes…
CVE-2026-53134 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale stack leak via the OIFNAME register For…
CVE-2026-53050 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquot_scan_active() with quota deactivation dquot_scan_active() can…
CVE-2026-53012 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic [1] [2]. When an…
CVE-2026-53006 - CVSS 9.8 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is…
CVE-2026-53002 - CVSS 9.8 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are…
CVE-2026-53001 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of:…
CVE-2026-52999 - CVSS 9.1 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching In nf_osf_match(), the…
CVE-2026-52998 - CVSS 7.5 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check The nf_osf_ttl()…
CVE-2026-52986 - CVSS 9.8 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in…
CVE-2026-52970 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates…
CVE-2026-52946 - CVSS 7.5 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to…
CVE-2026-52943 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers…
CVE-2026-52942 - CVSS 7.1 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: validate MAC header was set before dumping it The fallback path of…
CVE-2026-52933 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership()…
CVE-2026-52930 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch updates shm_destroy_orphaned() walks the…
CVE-2026-52912 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites…
CVE-2026-52910 - CVSS 7.8 (high), 2026-06-19: In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below…
CVE-2026-46323 - CVSS 7.8 (high), 2026-06-09: In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the…
CVE-2026-46306 - CVSS 7.5 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol…
CVE-2026-46303 - CVSS 8.2 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue()…
CVE-2026-46193 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV…
CVE-2026-46174 - CVSS 8.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure…
CVE-2026-46172 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6…
CVE-2026-46173 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task oopses,…
CVE-2026-46132 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo…
CVE-2026-46116 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a…
CVE-2026-46101 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise…
CVE-2026-46086 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be…
CVE-2026-46046 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit c8e008b60492…
CVE-2026-46040 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails When…
CVE-2026-46037 - CVSS 8.2 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type before using icmp_pointers Extended echo replies use…
CVE-2026-46033 - CVSS 7.1 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject short ahash digests during instance creation authencesn…
CVE-2026-46021 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone governor cleanup issues If…
CVE-2026-46015 - CVSS 7.8 (high), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listen_stop() migrates an…
CVE-2026-45841 - CVSS 5.5 (medium), 2026-05-27: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes…
CVE-2026-46300 - CVSS 7.8 (high), 2026-05-23: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach…
CVE-2026-43501 - CVSS 9.8 (critical), 2026-05-21: In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv()…
CVE-2026-43499 - CVSS 7.8 (high), 2026-05-21: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by…
CVE-2026-43492 - CVSS 5.5 (medium), 2026-05-19: In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an…
CVE-2026-46333 - CVSS 7.8 (high), 2026-05-15: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally…
CVE-2026-25789 - CVSS 7.2 (high), 2026-05-12: Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user…
CVE-2026-25786 - CVSS 9.3 (critical), 2026-05-12: Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow…
CVE-2026-25787 - CVSS 9.3 (critical), 2026-05-12: Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.…
CVE-2026-45186 - CVSS 7.5 (high), 2026-05-10: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
CVE-2026-43303 - CVSS 7.8 (high), 2026-05-08: In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (slub,…
CVE-2026-43284 - CVSS 8.8 (high), 2026-05-08: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages…
CVE-2026-43216 - CVSS 5.5 (medium), 2026-05-06: In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skb_may_tx_timestamp() skb_may_tx_timestamp() may acquire…
CVE-2026-43116 - CVSS 7.8 (high), 2026-05-06: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the…
CVE-2026-43089 - CVSS 5.5 (medium), 2026-05-06: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding…
CVE-2026-43085 - CVSS 5.5 (medium), 2026-05-06: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator When batching…
CVE-2026-43071 - CVSS 9.1 (critical), 2026-05-05: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two There is an OOB read problem on…
CVE-2026-43057 - CVSS 7.5 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only…
CVE-2026-43040 - CVSS 7.1 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to…
CVE-2026-43038 - CVSS 9.8 (critical), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed:…
CVE-2026-43035 - CVSS 5.5 (medium), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an…
CVE-2026-43027 - CVSS 7.8 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup…
CVE-2026-43033 - CVSS 7.8 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When…
CVE-2026-43026 - CVSS 5.5 (medium), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent…
CVE-2026-43030 - CVSS 7.8 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PKT_END &&…
CVE-2026-43028 - CVSS 7.1 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 character…
CVE-2026-43024 - CVSS 5.5 (medium), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is always used from…
CVE-2026-43025 - CVSS 7.3 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master…
CVE-2026-43011 - CVSS 9.8 (critical), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it…
CVE-2026-31768 - CVSS 7.8 (high), 2026-05-01: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use…