Known vulnerabilities in SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Vendor: Siemens
Software: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Software CPE: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SIMATIC S7-1500 CPU 1518-4 PN/DP MFP is affected by 24 known vulnerabilities: 1 high, 1 medium, 22 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63353		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63352		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63351		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155860 - Improper input validation
CVE-2026-63350		 CWE-20 High
No
No
 - 15.10.2026 SB2026101595
#VU80852 - Integer overflow
CVE-2023-28831		 CWE-190 Medium
No
No
 3.0.3 18.09.2023 SB2023091816
SB2023121343
#VU71344 - Missing Immutable Root of Trust in Hardware
CVE-2022-38773		 CWE-1326 Low
No
No
 - 19.01.2023 SB2023011909
#VU54220 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24513		 CWE-200 Low
No
No
 - 18.06.2021 SB2021061807
SB2021061808
SB2021062119
and 22 more
#VU54204 - Observable discrepancy
CVE-2020-24512		 CWE-203 Low
No
No
 - 17.06.2021 SB2021061716
SB2021061808
SB2021062119
and 35 more
#VU54203 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24511		 CWE-200 Low
No
No
 - 17.06.2021 SB2021061716
SB2021061808
SB2021062119
and 35 more
#VU54199 - Out-of-bounds read
CVE-2020-24506		 CWE-125 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
and 1 more
#VU54198 - Memory corruption
CVE-2020-8703		 CWE-119 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
#VU54196 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24507		 CWE-200 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2022111726
and 1 more
#VU54195 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-8704		 CWE-362 Low
No
No
 - 17.06.2021 SB2021061712
SB2021081109
SB2023032421
#VU54168 - Improper input validation
CVE-2020-24486		 CWE-20 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54167 - Out-of-bounds read
CVE-2020-12360		 CWE-125 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54165 - Memory corruption
CVE-2020-12358		 CWE-119 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101420
and 2 more
#VU54162 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-8670		 CWE-362 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022111726
and 3 more
#VU54161 - Improper Initialization
CVE-2020-12357		 CWE-665 Low
No
No
 - 16.06.2021 SB2021061616
SB2021081109
SB2022101817
#VU53229 - Memory corruption
CVE-2020-0591		 CWE-119 Low
No
No
 - 13.05.2021 SB2021051312
SB2020120234
#VU48680 - Improper Initialization
CVE-2020-8744		 CWE-665 Low
No
No
 - 12.11.2020 SB2020112614
SB2021051312


Showing elements 1 - 20 out of 24