Vulnérabilités de Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-63357 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… | 6.1 Moyenne | 13 oct. 2026 |
| CVE-2026-63356 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… | 6.1 Moyenne | 13 oct. 2026 |
| CVE-2026-63355 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… | 6.1 Moyenne | 13 oct. 2026 |
| CVE-2026-63354 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… | 9.6 Critique | 13 oct. 2026 |
| CVE-2026-63353 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… | 9.6 Critique | 13 oct. 2026 |
| CVE-2026-63352 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… | 6.1 Moyenne | 13 oct. 2026 |
| CVE-2026-63351 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… | 6.1 Moyenne | 13 oct. 2026 |
| CVE-2026-63350 | Affected devices do not properly restrict executable content contained in imported trace files | 9.6 Critique | 13 oct. 2026 |
| CVE-2026-25789 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page | 7.1 Élevée | 12 mai 2026 |
| CVE-2026-25787 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… | 9.1 Critique | 12 mai 2026 |
| CVE-2026-25786 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… | 9.1 Critique | 12 mai 2026 |
| CVE-2025-40943 | Affected devices do not properly sanitize contents of trace files | 9.6 Critique | 10 mars 2026 |
| CVE-2022-38465 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… | 9.3 Critique | 11 oct. 2022 |
| CVE-2021-37204 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller… | 7.5 Élevée | 9 févr. 2022 |
| CVE-2020-15782 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open… | 9.8 Critique | 28 mai 2021 |
| CVE-2019-19300 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation… | 7.5 Élevée | 14 avr. 2020 |
| CVE-2019-10936 | Affected devices improperly handle large amounts of specially crafted UDP packets | 7.5 Élevée | 10 oct. 2019 |
| CVE-2019-10943 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open… | Non notée | 13 août 2019 |
| CVE-2019-10929 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC… | Non notée | 13 août 2019 |
| CVE-2019-6568 | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition | 7.5 Élevée | 17 avr. 2019 |
Autres produits Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91