Skip to content

Vulnerabilities of Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS

Is your version affected?

CVE Summary Score Published
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Medium Oct 13, 2026
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Medium Oct 13, 2026
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Medium Oct 13, 2026
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critical Oct 13, 2026
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… 9.6 Critical Oct 13, 2026
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… 6.1 Medium Oct 13, 2026
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… 6.1 Medium Oct 13, 2026
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files 9.6 Critical Oct 13, 2026
CVE-2025-40943 Affected devices do not properly sanitize contents of trace files 9.6 Critical Mar 10, 2026
CVE-2024-46887 The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl'… 5.3 Medium Oct 8, 2024
CVE-2024-46886 The web server of affected devices does not properly validate input that is used for a user redirection 4.7 Medium Oct 8, 2024

Other Siemens products