Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-25789 | | Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social | HIGH 7.2 | 0.3 % | ||
| CVE-2026-25787 | | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-25786 | | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface | CRITICAL 9.3 | 0.4 % |