Skip to content

Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518-3 PN

Is your version affected?

CVE Summary Score Published
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Medium Oct 13, 2026
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Medium Oct 13, 2026
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Medium Oct 13, 2026
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critical Oct 13, 2026
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… 9.6 Critical Oct 13, 2026
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… 6.1 Medium Oct 13, 2026
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… 6.1 Medium Oct 13, 2026
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files 9.6 Critical Oct 13, 2026
CVE-2026-25789 Affected devices do not properly validate and sanitize filenames on the Firmware Update page 7.1 High May 12, 2026
CVE-2026-25787 Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… 9.1 Critical May 12, 2026
CVE-2026-25786 Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… 9.1 Critical May 12, 2026
CVE-2025-40943 Affected devices do not properly sanitize contents of trace files 9.6 Critical Mar 10, 2026

Other Siemens products