Aller au contenu

Vulnérabilités de Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Moyenne 13 oct. 2026
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Moyenne 13 oct. 2026
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Moyenne 13 oct. 2026
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critique 13 oct. 2026
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… 9.6 Critique 13 oct. 2026
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… 6.1 Moyenne 13 oct. 2026
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… 6.1 Moyenne 13 oct. 2026
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files 9.6 Critique 13 oct. 2026
CVE-2026-25789 Affected devices do not properly validate and sanitize filenames on the Firmware Update page 7.1 Élevée 12 mai 2026
CVE-2026-25787 Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… 9.1 Critique 12 mai 2026
CVE-2026-25786 Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… 9.1 Critique 12 mai 2026
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 Élevée 12 mai 2026
CVE-2025-40943 Affected devices do not properly sanitize contents of trace files 9.6 Critique 10 mars 2026
CVE-2025-40820 Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values… 7.5 Élevée 9 déc. 2025
CVE-2024-23814 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… 5.3 Moyenne 11 févr. 2025
CVE-2023-37482 The login functionality of the web server in affected devices does not normalize the response times of login attempts 5.3 Moyenne 11 févr. 2025
CVE-2024-46887 The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl'… 5.3 Moyenne 8 oct. 2024
CVE-2024-46886 The web server of affected devices does not properly validate input that is used for a user redirection 4.7 Moyenne 8 oct. 2024
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 Élevée 12 sept. 2023
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Non notée 15 mars 2022

Autres produits Siemens