Skip to contentSiemens Simatic S7-1500 Software Controller vulnerabilities
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize calculated signal data contained in imported calculated...CVE-2026-633575.3 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize calculated signal names contained in imported CSV trace...CVE-2026-633565.3 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize signal names contained in imported CSV trace files...CVE-2026-633555.3 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly validate and sanitize visual marker data contained in imported...CVE-2026-633549.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize comment fields contained in imported trace files before...CVE-2026-633539.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize calculated signal data contained in imported CSV trace...CVE-2026-633525.3 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly validate and sanitize visual properties of calculated signals...CVE-2026-633515.3 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly restrict executable content contained in imported trace files.
...CVE-2026-633509.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize filenames on the Firmware Update page....CVE-2026-257897.2 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize Technology Object (TO) name rendered on...CVE-2026-257879.3 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize PLC/station name rendered on the ...CVE-2026-257869.3 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize contents of trace files. This could allow an attacker...CVE-2025-409439.4 Critical
- siemens automation license manager v6.0, automation license manager v6.2, cemat v10.0 +136 more +138 moreThe affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...CVE-2025-300338.5 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +98 more +100 moreThe login functionality of the web server in affected devices does not normalize the response...CVE-2023-374826.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +84 more +86 moreThe web server of affected devices do not properly authenticate user request to the '/ClientArea...CVE-2024-468876.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +123 more +125 moreThe web server of affected devices does not properly validate input that is used for a user...CVE-2024-468865.1 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +150 more +152 moreAffected devices improperly handle specially crafted packets sent to port 102/tcp.
This could...CVE-2023-461567.5 High
- siemens simatic braumat, simatic cloud connect 7 cc712, simatic cloud connect 7 cc716 +172 more +174 moreThe ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application...CVE-2023-288318.7 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446954.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +166 more +168 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446945.5 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446934.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-403657.5 High
- siemens 6ag1151-8ab01-7ab0 firmware, 6ag1151-8fb01-2ab0 firmware, 6ag1314-6eh04-7ab0 firmware +211 more +213 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET...CVE-2022-306946.5 Medium
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +50 more +52 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...CVE-2022-384659.3 Critical
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-372057.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +54 more +56 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-372047.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-371857.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7 plcsim advanced +59 more +61 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...CVE-2020-283975.3 Medium
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +12 more +14 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...CVE-2020-157829.8 Critical
- siemens simatic et 200sp open controller (incl. siplus variants), simatic s7-1500 software controller, simatic et 200sp open controller firmware +1 more +3 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) ...CVE-2020-157967.5 High
- siemens simatic automation tool, simatic net pc software v14, simatic net pc software v15 +33 more +35 moreA vulnerability has been identified in SIMATIC Automation Tool (All versions), SIMATIC NET PC...CVE-2020-75806.7 Medium
- siemens development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p, ktk ate530s +96 more +98 moreA vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions),...CVE-2019-193007.5 High
- siemens simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1500 cpu family (incl. related et200 cpus and siplus variants), simatic s7-1500 software controller +14 more +16 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl....CVE-2019-192817.5 High
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +201 more +203 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...CVE-2019-109367.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...CVE-2019-109437.5 High
- siemens simatic cp 1626, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +32 more +34 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...CVE-2019-109295.9 Medium
- siemens simatic cp 443-1 opc ua, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic hmi comfort outdoor panels 7" & 15" (incl. siplus variants) +37 more +39 moreA vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP...CVE-2019-65757.5 High
- siemens simatic cp 1604, simatic cp 1616, cp1604 firmware +141 more +143 moreA vulnerability has been identified in RFID 181EIP, SIMATIC CP 1604, SIMATIC CP 1616, SIMATIC CP...CVE-2019-65687.5 High
- siemens simatic s7-1500 software controller, siemens ag simatic et 200sp open controller, simatic s7-1500 incl. f +3 more +5 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and...CVE-2018-138057.5 High
- siemens simatic cp 343-1 (incl. siplus variants), simatic cp 343-1 advanced (incl. siplus variants), simatic cp 443-1 +52 more +54 moreA vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1...CVE-2018-48436.5 Medium
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +121 more +123 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...CVE-2017-127418.7 High
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +199 more +201 moreSpecially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected...CVE-2017-26817.1 High
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +229 more +231 moreSpecially crafted PROFINET DCP broadcast packets could cause a denial of service condition of...CVE-2017-26807.1 High