Advisories · Technology

Siemens SIMATIC S7-1500 Software Controller.

Every CVE that names Siemens SIMATIC S7-1500 Software Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38465 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
Not analysed yet 11 Oct 2022
CVE-2021-37205 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Denial of service
Not analysed yet 9 Feb 2022
CVE-2021-37204 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2021-37185 CVE record

CVSS 7.5 High

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-672
Not analysed yet 9 Feb 2022
CVE-2020-28397 CVE record

Incorrect authorization in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Broken access control
Not analysed yet 10 Aug 2021
CVE-2020-15782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 28 May 2021
CVE-2020-15796 CVE record

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl.
- Siemens SIMATIC ET 200SP Open Controller (incl. SIPLUS variants)
- Siemens SIMATIC S7-1500 Software Controller
- CWE-248
Not analysed yet 14 Dec 2020
CVE-2020-7580 CVE record

Unquoted search path in Siemens SIMATIC Automation Tool and others
- Siemens SIMATIC Automation Tool
- Siemens SIMATIC NET PC Software V14
- CWE-428
Not analysed yet 10 Jun 2020
CVE-2019-10943 CVE record

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- CWE-353
Not analysed yet 13 Aug 2019
CVE-2019-10929 CVE record

Broken or risky cryptographic algorithm in Siemens SIMATIC CP 1626 and others
- Siemens SIMATIC CP 1626
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Weak cryptography or TLS
Not analysed yet 13 Aug 2019
CVE-2019-6575 CVE record

CVSS 7.5 High

Siemens SIMATIC CP 443-1 OPC UA: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions)…
- Siemens SIMATIC CP 443-1 OPC UA
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- CWE-248
Not analysed yet 17 Apr 2019
CVE-2018-4843 CVE record

CVSS 6.5 Medium

Improper input validation in Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 and others
- Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7
- Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7
- CWE-20
Not analysed yet 20 Mar 2018