Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-32778 | libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier… | 2.9 Low | Mar 16, 2026 |
| CVE-2026-32777 | libexpat before 2.7.5 allows an infinite loop while parsing DTD content | 4.0 Medium | Mar 16, 2026 |
| CVE-2026-32776 | libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content | 4.0 Medium | Mar 16, 2026 |
| CVE-2026-3497 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions | 2.7 Low | Mar 12, 2026 |
| CVE-2026-3904 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C… | 6.2 Medium | Mar 11, 2026 |
| CVE-2025-40943 | Affected devices do not properly sanitize contents of trace files | 9.6 Critical | Mar 10, 2026 |
| CVE-2026-23231 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in… | 7.8 High | Mar 4, 2026 |
| CVE-2026-23204 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful()… | 7.1 High | Feb 14, 2026 |
| CVE-2025-71221 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in… | 7.8 High | Feb 14, 2026 |
| CVE-2026-23154 | In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO… | Not rated | Feb 14, 2026 |
| CVE-2026-23113 | io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop | Not rated | Feb 14, 2026 |
| CVE-2026-23111 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check… | 7.8 High | Feb 13, 2026 |
| CVE-2026-23110 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final… | Not rated | Feb 4, 2026 |
| CVE-2026-23103 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the… | 7.8 High | Feb 4, 2026 |
| CVE-2026-23100 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series… | Not rated | Feb 4, 2026 |
| CVE-2026-23095 | In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0 | 7.5 High | Feb 4, 2026 |
| CVE-2026-23086 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The… | Not rated | Feb 4, 2026 |
| CVE-2026-23087 | scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() | Not rated | Feb 4, 2026 |
| CVE-2026-23084 | In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in… | Not rated | Feb 4, 2026 |
| CVE-2026-23083 | In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO | Not rated | Feb 4, 2026 |
| CVE-2026-23060 | In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD… | Not rated | Feb 4, 2026 |
| CVE-2025-71197 | In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in… | Not rated | Feb 4, 2026 |
| CVE-2026-23054 | In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming… | Not rated | Feb 4, 2026 |
| CVE-2026-23038 | In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in… | Not rated | Jan 31, 2026 |
| CVE-2026-23026 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in… | Not rated | Jan 31, 2026 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91