Aller au contenu

Vulnérabilités connues pour Siemens SIMATIC S7-1500 CPU 1511C-1 PN

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Moyenne 13 oct. 2026
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Moyenne 13 oct. 2026
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Moyenne 13 oct. 2026
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critique 13 oct. 2026
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… 9.6 Critique 13 oct. 2026
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… 6.1 Moyenne 13 oct. 2026
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… 6.1 Moyenne 13 oct. 2026
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files 9.6 Critique 13 oct. 2026
CVE-2026-25789 Affected devices do not properly validate and sanitize filenames on the Firmware Update page 7.1 Élevée 12 mai 2026
CVE-2026-25787 Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… 9.1 Critique 12 mai 2026
CVE-2026-25786 Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… 9.1 Critique 12 mai 2026
CVE-2025-40943 Affected devices do not properly sanitize contents of trace files 9.6 Critique 10 mars 2026
CVE-2023-37482 The login functionality of the web server in affected devices does not normalize the response times of login attempts 5.3 Moyenne 11 févr. 2025
CVE-2024-46887 The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl'… 5.3 Moyenne 8 oct. 2024
CVE-2024-46886 The web server of affected devices does not properly validate input that is used for a user redirection 4.7 Moyenne 8 oct. 2024
CVE-2023-46156 Affected devices improperly handle specially crafted packets sent to port 102/tcp 7.5 Élevée 12 déc. 2023
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 Élevée 12 sept. 2023
CVE-2022-38773 Affected devices do not contain an Immutable Root of Trust in Hardware 4.6 Moyenne 10 janv. 2023
CVE-2021-44694 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 5.5 Moyenne 13 déc. 2022
CVE-2021-44693 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Moyenne 13 déc. 2022
CVE-2021-44695 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Moyenne 13 déc. 2022
CVE-2021-40365 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 7.5 Élevée 13 déc. 2022
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking 6.5 Moyenne 8 nov. 2022
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Non notée 15 mars 2022

Autres produits Siemens