Advisories · Technology

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants).

Every CVE that names Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-37482 CVE record

CVSS 6.9 Medium

Observable discrepancy in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Information disclosure
Not analysed yet 11 Feb 2025
CVE-2023-46156 CVE record

CVSS 7.5 High

Use after free in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-28831 CVE record

CVSS 8.7 High

Integer overflow in Siemens SIMATIC BRAUMAT and others
- Siemens SIMATIC BRAUMAT
- Siemens SIMATIC Cloud Connect 7 CC712
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2021-44695 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1286
Not analysed yet 13 Dec 2022
CVE-2021-44694 CVE record

CVSS 5.5 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1287
Not analysed yet 13 Dec 2022
CVE-2021-44693 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1284
Not analysed yet 13 Dec 2022
CVE-2021-40365 CVE record

CVSS 7.5 High

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-20
Not analysed yet 13 Dec 2022
CVE-2022-30694 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site request forgery (CSRF)
Not analysed yet 8 Nov 2022
CVE-2022-38465 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
Not analysed yet 11 Oct 2022
CVE-2021-37205 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Denial of service
Not analysed yet 9 Feb 2022
CVE-2021-37204 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2021-37185 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2020-28397 CVE record

Incorrect authorization in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Broken access control
Not analysed yet 10 Aug 2021
CVE-2020-15782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 28 May 2021
CVE-2019-10943 CVE record

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-353
Not analysed yet 13 Aug 2019
CVE-2019-10929 CVE record

Broken or risky cryptographic algorithm in Siemens SIMATIC CP 1626 and others
- Siemens SIMATIC CP 1626
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Weak cryptography or TLS
Not analysed yet 13 Aug 2019
CVE-2019-6575 CVE record

CVSS 7.5 High

Siemens SIMATIC CP 443-1 OPC UA: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions)…
- Siemens SIMATIC CP 443-1 OPC UA
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-248
Not analysed yet 17 Apr 2019
CVE-2019-6568 CVE record

CVSS 7.5 High

Out-of-bounds read in Siemens SIMATIC CP 1604 and others
- Siemens SIMATIC CP 1604
- Siemens SIMATIC CP 1616
- Memory corruption
Not analysed yet 17 Apr 2019