Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
20 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-63357 | | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Tr | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63356 | | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messa | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63355 | | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63354 | | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-63353 | | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-63352 | | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63351 | | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63350 | | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social en | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-25789 | | Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social | HIGH 7.2 | 0.3 % | ||
| CVE-2026-25787 | | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-25786 | | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface | CRITICAL 9.3 | 0.4 % | ||
| CVE-2025-40943 | | Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering | CRITICAL 9.4 | 0.5 % | ||
| CVE-2022-38465 | All versions | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.3 | 0.2 % | ||
| CVE-2021-37204 | All versions | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All version | HIGH 7.5 | 2.2 % | ||
| CVE-2020-15782 | All versions | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.8 | 5.2 % | ||
| CVE-2019-19300 | | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET I | HIGH 7.5 | 1.7 % | ||
| CVE-2019-10936 | | Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to | HIGH 7.5 | 2.1 % | ||
| CVE-2019-10943 | All versions | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. | HIGH 7.5 | 1.0 % | ||
| CVE-2019-10929 | All versions | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-6568 | | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a deni | HIGH 7.5 | 1.4 % |