Vulnerabilities of Siemens SIMATIC S7-1500 CPU 1511-1 PN
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-63357 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… | 6.1 Medium | Oct 13, 2026 |
| CVE-2026-63356 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… | 6.1 Medium | Oct 13, 2026 |
| CVE-2026-63355 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… | 6.1 Medium | Oct 13, 2026 |
| CVE-2026-63354 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-63353 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-63352 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… | 6.1 Medium | Oct 13, 2026 |
| CVE-2026-63351 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… | 6.1 Medium | Oct 13, 2026 |
| CVE-2026-63350 | Affected devices do not properly restrict executable content contained in imported trace files | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-25789 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page | 7.1 High | May 12, 2026 |
| CVE-2026-25787 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… | 9.1 Critical | May 12, 2026 |
| CVE-2026-25786 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… | 9.1 Critical | May 12, 2026 |
| CVE-2025-40833 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests | 7.5 High | May 12, 2026 |
| CVE-2025-40943 | Affected devices do not properly sanitize contents of trace files | 9.6 Critical | Mar 10, 2026 |
| CVE-2025-40820 | Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values… | 7.5 High | Dec 9, 2025 |
| CVE-2024-23814 | The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… | 5.3 Medium | Feb 11, 2025 |
| CVE-2023-37482 | The login functionality of the web server in affected devices does not normalize the response times of login attempts | 5.3 Medium | Feb 11, 2025 |
| CVE-2024-46887 | The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl'… | 5.3 Medium | Oct 8, 2024 |
| CVE-2024-46886 | The web server of affected devices does not properly validate input that is used for a user redirection | 4.7 Medium | Oct 8, 2024 |
| CVE-2023-46156 | Affected devices improperly handle specially crafted packets sent to port 102/tcp | 7.5 High | Dec 12, 2023 |
| CVE-2023-28831 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… | 7.5 High | Sep 12, 2023 |
| CVE-2022-38773 | Affected devices do not contain an Immutable Root of Trust in Hardware | 4.6 Medium | Jan 10, 2023 |
| CVE-2021-44694 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 5.5 Medium | Dec 13, 2022 |
| CVE-2021-44693 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Medium | Dec 13, 2022 |
| CVE-2021-44695 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Medium | Dec 13, 2022 |
| CVE-2021-40365 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 7.5 High | Dec 13, 2022 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91