Known vulnerabilities in SIMATIC S7-1500 CPU

Vendor: Siemens
Software: SIMATIC S7-1500 CPU
Software CPE: cpe:2.3:h:siemens:simatic_s7-1500_cpu:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 CPU SIMATIC S7-1500 CPU is affected by 22 known vulnerabilities: 1 high, 10 medium, 11 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70376 - Improper input validation
CVE-2021-44695		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70375 - Improper input validation
CVE-2021-44694		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70374 - Improper input validation
CVE-2021-44693		 CWE-20 Low
No
No
 3.0.1 15.12.2022 SB2022121520
#VU70373 - Improper input validation
CVE-2021-40365		 CWE-20 Medium
No
No
 3.0.1 15.12.2022 SB2022121520
#VU68263 - Insufficiently Protected Credentials
CVE-2022-38465		 CWE-522 Low
No
No
 2.9.2 12.10.2022 SB2022101249
#VU60532 - Missing release of memory after effective lifetime
CVE-2021-37205		 CWE-401 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU60531 - Operation on a Resource after Expiration or Release
CVE-2021-37204		 CWE-672 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU60530 - Operation on a Resource after Expiration or Release
CVE-2021-37185		 CWE-672 Medium
No
No
 2.9.4 11.02.2022 SB2022021105
#VU55778 - Improper Authorization
CVE-2020-28397		 CWE-285 Medium
No
No
 2.9.2 11.08.2021 SB2021081110
#VU53663 - Memory corruption
CVE-2020-15782		 CWE-119 High
No
No
 2.9.2 31.05.2021 SB2021053102
SB2021071417
SB2021071418
#VU26965 - Resource exhaustion
CVE-2019-19300		 CWE-400 Medium
No
No
 2.0, 2.8 15.04.2020 SB2020041519
#VU25266 - Resource exhaustion
CVE-2019-19281		 CWE-400 Medium
No
No
 2.8 12.02.2020 SB2020021213
#VU21971 - Improper input validation
CVE-2019-6575		 CWE-20 Medium
No
No
 2.6.1 21.10.2019 SB2019041713
#VU21970 - Improper Access Control
CVE-2019-10943		 CWE-284 Medium
No
No
 - 21.10.2019 SB2019081348
#VU21969 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2019-10929		 CWE-300 Low
No
No
 - 21.10.2019 SB2019081348
#VU21936 - Resource exhaustion
CVE-2019-10936		 CWE-400 Medium
No
No
 2.0 18.10.2019 SB2019101013
#VU17386 - Improper input validation
CVE-2018-16559		 CWE-20 Low
No
No
 2.5 06.02.2019 SB2018102517
#VU17385 - Improper input validation
CVE-2018-16558		 CWE-20 Low
No
No
 2.5 06.02.2019 SB2018102517
#VU15890 - Resource exhaustion
CVE-2018-13815		 CWE-400 Low
No
No
 2.6 13.11.2018 SB2018111411
#VU15304 - Improper input validation
CVE-2018-13805		 CWE-20 Low
No
No
 2.5 09.10.2018 SB2018101021


Showing elements 1 - 20 out of 22