Simatic S7-1500 Software Controller (Siemens) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2023-12-12. Vendor: Siemens.
CVEs of Simatic S7-1500 Software Controller
- CVE-2023-46156 - CVSS 7.5 (high), 2023-12-12: Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A…
- CVE-2022-30694 - CVSS 6.5 (medium), 2022-11-08: The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the…
- CVE-2022-38465 - CVSS 9.3 (critical), 2022-10-11: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS…
- CVE-2021-37204 - CVSS 7.5 (high), 2022-02-09: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 <…
- CVE-2021-37205 - CVSS 7.5 (high), 2022-02-09: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2…
- CVE-2021-37185 - CVSS 7.5 (high), 2022-02-09: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2…
- CVE-2020-28397 - CVSS 5.3 (medium), 2021-08-10: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS…
- CVE-2020-15782 - CVSS 9.8 (critical), 2021-05-28: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS…
- CVE-2020-15796 - CVSS 7.5 (high), 2020-12-14: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web…
- CVE-2020-7580 - CVSS 6.7 (medium), 2020-06-10: A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14),…
- CVE-2019-19300 - CVSS 7.5 (high), 2020-04-14: A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P,…
- CVE-2019-10936 - CVSS 7.5 (high), 2019-10-10: Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of…
- CVE-2019-10943 - CVSS 7.5 (high), 2019-08-13: A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)…
- CVE-2019-10929 - CVSS 5.9 (medium), 2019-08-13: A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions),…
- CVE-2019-6575 - CVSS 7.5 (high), 2019-04-17: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All…
- CVE-2019-6568 - CVSS 7.5 (high), 2019-04-17: The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service…
- CVE-2018-4843 - CVSS 6.5 (medium), 2018-03-20: A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3),…
- CVE-2017-12741 - CVSS 8.7 (high), 2017-12-26: Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
- CVE-2017-2681 - CVSS 7.1 (high), 2017-05-11: Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that…
- CVE-2017-2680 - CVSS 7.1 (high), 2017-05-11: Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human…
