Known vulnerabilities in SIMATIC S7-1500 Software Controller CPU 1508S V3

Vendor: Siemens
Software: SIMATIC S7-1500 Software Controller CPU 1508S V3
Software CPE: cpe:2.3:h:siemens:simatic_s7-1500_software_controller_cpu_1508s_v3:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC S7-1500 Software Controller CPU 1508S V3 SIMATIC S7-1500 Software Controller CPU 1508S V3 is affected by 8 known vulnerabilities: 1 high, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63357		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63356		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155875 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63355		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63354		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63353		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63352		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63351		 CWE-79 Low
No
No
 - 15.10.2026 SB2026101595
#VU155860 - Improper input validation
CVE-2026-63350		 CWE-20 High
No
No
 - 15.10.2026 SB2026101595