Known vulnerabilities in SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs

Vendor: Siemens
Software: SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs
Software CPE: cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc3_v4_cpus:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs is affected by 8 known vulnerabilities: 1 high, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63357		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63356		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63355		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63354		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63353		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63352		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63351		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155860 - Improper input validation
CVE-2026-63350		 CWE-20 High
No
No
 - 15.10.2026 SB2026101595