Known vulnerabilities in SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK

Known vulnerabilities in SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK

Vendor: Siemens

Software: SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK

Software CPE: cpe:2.3:h:siemens:simatic_s7-1500_cpu_s7-1518-4_pn_dp_odk:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU155878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63357	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63356	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63355	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63354	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63353	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63352	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-63351	CWE-79	Low	No	No	-	15.10.2026	SB2026101595
#VU155860 - Improper input validation CVE-2026-63350	CWE-20	High	No	No	-	15.10.2026	SB2026101595
#VU80852 - Integer overflow CVE-2023-28831	CWE-190	Medium	No	No	2.9.7	18.09.2023	SB2023091816 SB2023121343
#VU71344 - Missing Immutable Root of Trust in Hardware CVE-2022-38773	CWE-1326	Low	No	No	-	19.01.2023	SB2023011909