Skip to content

Vulnerabilities of Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL

Is your version affected?

CVE Summary Score Published
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Medium Oct 13, 2026
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Medium Oct 13, 2026
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Medium Oct 13, 2026
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critical Oct 13, 2026
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on… 9.6 Critical Oct 13, 2026
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before… 6.1 Medium Oct 13, 2026
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV… 6.1 Medium Oct 13, 2026
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files 9.6 Critical Oct 13, 2026
CVE-2026-25789 Affected devices do not properly validate and sanitize filenames on the Firmware Update page 7.1 High May 12, 2026
CVE-2026-25787 Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control… 9.1 Critical May 12, 2026
CVE-2026-25786 Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters… 9.1 Critical May 12, 2026
CVE-2025-40943 Affected devices do not properly sanitize contents of trace files 9.6 Critical Mar 10, 2026
CVE-2024-46887 The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl'… 5.3 Medium Oct 8, 2024
CVE-2024-46886 The web server of affected devices does not properly validate input that is used for a user redirection 4.7 Medium Oct 8, 2024
CVE-2023-46156 Affected devices improperly handle specially crafted packets sent to port 102/tcp 7.5 High Dec 12, 2023
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 High Sep 12, 2023
CVE-2022-38773 Affected devices do not contain an Immutable Root of Trust in Hardware 4.6 Medium Jan 10, 2023
CVE-2021-44694 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 5.5 Medium Dec 13, 2022
CVE-2021-44693 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Medium Dec 13, 2022
CVE-2021-44695 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Medium Dec 13, 2022
CVE-2021-40365 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 7.5 High Dec 13, 2022
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking 6.5 Medium Nov 8, 2022
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Not rated Mar 15, 2022

Other Siemens products