Vulnerabilities of Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-41080 | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document | 2.9 Low | Apr 16, 2026 |
| CVE-2026-31427 | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | Not rated | Apr 13, 2026 |
| CVE-2026-31428 | netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD | Not rated | Apr 13, 2026 |
| CVE-2026-31424 | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | Not rated | Apr 13, 2026 |
| CVE-2026-31423 | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | Not rated | Apr 13, 2026 |
| CVE-2026-31421 | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | Not rated | Apr 13, 2026 |
| CVE-2026-31422 | net/sched: cls_flow: fix NULL pointer dereference on shared blocks | Not rated | Apr 13, 2026 |
| CVE-2026-31418 | netfilter: ipset: drop logically empty buckets in mtype_del | Not rated | Apr 13, 2026 |
| CVE-2026-31417 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets… | 7.5 High | Apr 13, 2026 |
| CVE-2026-31416 | netfilter: nfnetlink_log: account for netlink header size | Not rated | Apr 13, 2026 |
| CVE-2026-31415 | ipv6: avoid overflows in ip6_datagram_send_ctl() | Not rated | Apr 13, 2026 |
| CVE-2026-31414 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper… | 9.8 Critical | Apr 13, 2026 |
| CVE-2026-31411 | net: atm: fix crash due to unvalidated vcc pointer in sigd_send() | Not rated | Apr 8, 2026 |
| CVE-2026-31403 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Hold net reference for the lifetime of… | 7.8 High | Apr 3, 2026 |
| CVE-2026-31402 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache… | 9.8 Critical | Apr 3, 2026 |
| CVE-2026-31396 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock… | 7.8 High | Apr 3, 2026 |
| CVE-2026-31391 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix OOM ->tfm_count leak… | Not rated | Apr 3, 2026 |
| CVE-2026-31389 | In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration… | 7.8 High | Apr 3, 2026 |
| CVE-2026-23475 | spi: fix statistics allocation | Not rated | Apr 3, 2026 |
| CVE-2026-23474 | In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table… | Not rated | Apr 3, 2026 |
| CVE-2026-23463 | In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: fix race condition in… | Not rated | Apr 3, 2026 |
| CVE-2026-23458 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix use-after-free in… | 7.8 High | Apr 3, 2026 |
| CVE-2026-23457 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length… | 8.6 High | Apr 3, 2026 |
| CVE-2026-23456 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in… | 8.2 High | Apr 3, 2026 |
| CVE-2026-23454 | net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown | Not rated | Apr 3, 2026 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91