Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-23455 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero… | 9.1 Critical | Apr 3, 2026 |
| CVE-2026-23452 | PM: runtime: Fix a race condition related to device removal | Not rated | Apr 3, 2026 |
| CVE-2026-23450 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in… | 9.8 Critical | Apr 3, 2026 |
| CVE-2026-23449 | In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: Fix double-free in teql_master_xmit… | 7.8 High | Apr 3, 2026 |
| CVE-2026-23446 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Do not perform PM inside suspend… | Not rated | Apr 3, 2026 |
| CVE-2026-23439 | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | Not rated | Apr 3, 2026 |
| CVE-2026-23438 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: guard flow control update with… | Not rated | Apr 3, 2026 |
| CVE-2026-23434 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: serialize lock/unlock against other… | 7.1 High | Apr 3, 2026 |
| CVE-2026-23422 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving… | Not rated | Apr 3, 2026 |
| CVE-2026-23414 | In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait()… | 7.5 High | Apr 2, 2026 |
| CVE-2026-4046 | The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when… | 7.5 High | Mar 30, 2026 |
| CVE-2026-23399 | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | Not rated | Mar 28, 2026 |
| CVE-2026-23398 | icmp: fix NULL pointer dereference in icmp_tag_validation() | Not rated | Mar 26, 2026 |
| CVE-2026-23397 | nfnetlink_osf: validate individual option lengths in fingerprints | Not rated | Mar 26, 2026 |
| CVE-2026-23392 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu… | 7.8 High | Mar 25, 2026 |
| CVE-2026-23391 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_CT: drop pending enqueued packets on… | 7.8 High | Mar 25, 2026 |
| CVE-2026-23381 | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | Not rated | Mar 25, 2026 |
| CVE-2026-23379 | net/sched: ets: fix divide by zero in the offload path | Not rated | Mar 25, 2026 |
| CVE-2026-23378 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Fix metalist update behavior… | 7.8 High | Mar 25, 2026 |
| CVE-2026-23370 | platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data | Not rated | Mar 25, 2026 |
| CVE-2026-23368 | net: phy: register phy led_triggers during probe to avoid AB-BA deadlock | Not rated | Mar 25, 2026 |
| CVE-2026-23365 | net: usb: kalmia: validate USB endpoints | Not rated | Mar 25, 2026 |
| CVE-2026-23359 | bpf: Fix stack-out-of-bounds write in devmap | Not rated | Mar 25, 2026 |
| CVE-2026-23351 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink… | 7.8 High | Mar 25, 2026 |
| CVE-2026-23343 | xdp: produce a warning when calculated tailroom is negative | Not rated | Mar 25, 2026 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91