Advisories · Technology

Siemens SIMATIC S7-1500 CPU 1511-1 PN.

Every CVE that names Siemens SIMATIC S7-1500 CPU 1511-1 PN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-63357 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63356 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63355 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63354 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63353 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63352 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63351 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63350 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 13 Oct 2026
CVE-2026-25789 CVE record

CVSS 7.2 High

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25787 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25786 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2025-40943 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 10 Mar 2026
CVE-2024-46887 CVE record

CVSS 6.9 Medium

Authentication bypass in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2023-46156 CVE record

CVSS 7.5 High

Use after free in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2022-38773 CVE record

CVSS 4.6 Medium

Affected devices do not contain an Immutable Root of Trust in Hardware.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1326
Not analysed yet 10 Jan 2023
CVE-2021-44695 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1286
Not analysed yet 13 Dec 2022
CVE-2021-44694 CVE record

CVSS 5.5 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1287
Not analysed yet 13 Dec 2022
CVE-2021-44693 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1284
Not analysed yet 13 Dec 2022
CVE-2021-40365 CVE record

CVSS 7.5 High

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-20
Not analysed yet 13 Dec 2022
CVE-2022-30694 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site request forgery (CSRF)
Not analysed yet 8 Nov 2022