Advisories · Technology

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants).

Every CVE that names Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-63357 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63356 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63355 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63354 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63353 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63352 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63351 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63350 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 13 Oct 2026
CVE-2026-25789 CVE record

CVSS 7.2 High

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25787 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25786 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2025-40943 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 10 Mar 2026
CVE-2022-38465 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
Not analysed yet 11 Oct 2022
CVE-2021-37204 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2020-15782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 28 May 2021
CVE-2019-10943 CVE record

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-353
Not analysed yet 13 Aug 2019
CVE-2019-10929 CVE record

Broken or risky cryptographic algorithm in Siemens SIMATIC CP 1626 and others
- Siemens SIMATIC CP 1626
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Weak cryptography or TLS
Not analysed yet 13 Aug 2019
CVE-2019-6568 CVE record

CVSS 7.5 High

Out-of-bounds read in Siemens SIMATIC CP 1604 and others
- Siemens SIMATIC CP 1604
- Siemens SIMATIC CP 1616
- Memory corruption
Not analysed yet 17 Apr 2019