Known vulnerabilities in SIMATIC S7-1500 Software Controller

Vendor: Siemens
Software: SIMATIC S7-1500 Software Controller
Software CPE: cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 Software Controller SIMATIC S7-1500 Software Controller is affected by 15 known vulnerabilities: 1 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84383 - Use After Free
CVE-2023-46156		 CWE-416 Medium
No
No
 - 13.12.2023 SB2023121330
SB2023121523
#VU68263 - Insufficiently Protected Credentials
CVE-2022-38465		 CWE-522 Low
No
No
 21.9 12.10.2022 SB2022101249
#VU60532 - Missing release of memory after effective lifetime
CVE-2021-37205		 CWE-401 Medium
No
No
 - 11.02.2022 SB2022021105
#VU60531 - Operation on a Resource after Expiration or Release
CVE-2021-37204		 CWE-672 Medium
No
No
 - 11.02.2022 SB2022021105
#VU60530 - Operation on a Resource after Expiration or Release
CVE-2021-37185		 CWE-672 Medium
No
No
 - 11.02.2022 SB2022021105
#VU55778 - Improper Authorization
CVE-2020-28397		 CWE-285 Medium
No
No
 - 11.08.2021 SB2021081110
#VU53663 - Memory corruption
CVE-2020-15782		 CWE-119 High
No
No
 - 31.05.2021 SB2021053102
SB2021071417
SB2021071418
#VU48917 - Uncaught Exception
CVE-2020-15796		 CWE-248 Medium
No
No
 21.8 10.12.2020 SB2020121014
#VU28936 - Unquoted Search Path or Element
CVE-2020-7580		 CWE-428 Low
No
No
 - 10.06.2020 SB2020061031
#VU26965 - Resource exhaustion
CVE-2019-19300		 CWE-400 Medium
No
No
 2.0, 20.8 15.04.2020 SB2020041519
#VU25266 - Resource exhaustion
CVE-2019-19281		 CWE-400 Medium
No
No
 20.8 12.02.2020 SB2020021213
#VU21970 - Improper Access Control
CVE-2019-10943		 CWE-284 Medium
No
No
 - 21.10.2019 SB2019081348
#VU21969 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2019-10929		 CWE-300 Low
No
No
 - 21.10.2019 SB2019081348
#VU15304 - Improper input validation
CVE-2018-13805		 CWE-20 Low
No
No
 2.5 09.10.2018 SB2018101021
#VU11203 - Improper input validation
CVE-2018-4843		 CWE-20 Low
No
No
 - 20.03.2018 SB2018032201