Known vulnerabilities in SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Vendor: Siemens
Software: SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Software CPE: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP is affected by 12 known vulnerabilities: 1 high, 1 medium, 10 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63357		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63356		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63355		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63354		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63353		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63352		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63351		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155860 - Improper input validation
CVE-2026-63350		 CWE-20 High
No
No
 - 15.10.2026 SB2026101595
#VU80852 - Integer overflow
CVE-2023-28831		 CWE-190 Medium
No
No
 3.0.3 18.09.2023 SB2023091816
SB2023121343
#VU71344 - Missing Immutable Root of Trust in Hardware
CVE-2022-38773		 CWE-1326 Low
No
No
 - 19.01.2023 SB2023011909
#VU53229 - Memory corruption
CVE-2020-0591		 CWE-119 Low
No
No
 - 13.05.2021 SB2021051312
SB2020120234
#VU48680 - Improper Initialization
CVE-2020-8744		 CWE-665 Low
No
No
 - 12.11.2020 SB2020112614
SB2021051312