Siemens SIMATIC S7-1500 Software Controller
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-38465 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.3 | 0.2 % | ||
| CVE-2021-37205 | All versions >= V21.9 < V21.9.4 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 1.6 % | ||
| CVE-2021-37204 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All version | HIGH 7.5 | 2.2 % | ||
| CVE-2021-37185 | All versions >= V21.9 < V21.9.4 | A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller C | HIGH 7.5 | 2.1 % | ||
| CVE-2020-28397 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | MEDIUM 5.3 | 0.8 % | ||
| CVE-2020-15782 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP | CRITICAL 9.8 | 5.2 % | ||
| CVE-2020-15796 | V20.8 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller | HIGH 7.5 | 1.6 % | ||
| CVE-2020-7580 | | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 | MEDIUM 6.7 | 0.5 % | ||
| CVE-2019-19300 | | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET I | HIGH 7.5 | 1.7 % | ||
| CVE-2019-10936 | | Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to | HIGH 7.5 | 2.1 % | ||
| CVE-2019-10943 | | A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. | HIGH 7.5 | 1.0 % | ||
| CVE-2019-10929 | | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants | MEDIUM 5.9 | 1.0 % | ||
| CVE-2019-6575 | | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS | HIGH 7.5 | 1.6 % | ||
| CVE-2019-6568 | | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a deni | HIGH 7.5 | 1.4 % | ||
| CVE-2018-4843 | | A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All | MEDIUM 6.5 | 0.5 % | ||
| CVE-2017-12741 | | Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually. | HIGH 8.7 | 3.3 % |