Vulnerabilities of Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-63354 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-63353 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-63350 | Affected devices do not properly restrict executable content contained in imported trace files | 9.6 Critical | Oct 13, 2026 |
| CVE-2026-53006 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr… | 9.8 Critical | Jun 24, 2026 |
| CVE-2026-53002 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace… | 9.8 Critical | Jun 24, 2026 |
| CVE-2026-52999 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read… | 9.1 Critical | Jun 24, 2026 |
| CVE-2026-52986 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use… | 9.8 Critical | Jun 24, 2026 |
| CVE-2026-43501 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when… | 9.8 Critical | May 21, 2026 |
| CVE-2026-25787 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… | 9.1 Critical | May 12, 2026 |
| CVE-2026-25786 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… | 9.1 Critical | May 12, 2026 |
| CVE-2026-43071 | In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two… | 9.1 Critical | May 5, 2026 |
| CVE-2026-43038 | In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in… | 9.8 Critical | May 1, 2026 |
| CVE-2026-43011 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When… | 9.8 Critical | May 1, 2026 |
| CVE-2026-31682 | In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing… | 9.1 Critical | Apr 25, 2026 |
| CVE-2026-31669 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in… | 9.8 Critical | Apr 24, 2026 |
| CVE-2026-31649 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The… | 9.8 Critical | Apr 24, 2026 |
| CVE-2026-31533 | In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path… | 9.8 Critical | Apr 23, 2026 |
| CVE-2026-31448 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data… | 9.4 Critical | Apr 22, 2026 |
| CVE-2026-5450 | Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to… | 9.8 Critical | Apr 20, 2026 |
| CVE-2026-31414 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper… | 9.8 Critical | Apr 13, 2026 |
| CVE-2026-31402 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache… | 9.8 Critical | Apr 3, 2026 |
| CVE-2026-23455 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero… | 9.1 Critical | Apr 3, 2026 |
| CVE-2026-23450 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in… | 9.8 Critical | Apr 3, 2026 |
| CVE-2025-40943 | Affected devices do not properly sanitize contents of trace files | 9.6 Critical | Mar 10, 2026 |
| CVE-2025-71095 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy… | 9.1 Critical | Jan 13, 2026 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91