SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) vulnerabilities

Product

SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

by Siemens · last CVE Oct 11, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 1High 10Medium 3Low 0

Severity

All severities14 Critical1 High10 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-15782	9.8	5%	May 28	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V2.9.2
CVE-2022-38465	7.8	0%	Oct 11	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V2.9.2
CVE-2022-25622	7.5	1%	Apr 12	The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than… Affected: All versions < V2.0.0
CVE-2021-37205	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions >= V2.9.2 < V2.9.4
CVE-2021-37204	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP… Affected: All versions < V2.9.2; All versions >= V2.9.2 < V2.9.4
CVE-2021-37185	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions >= V2.9.2 < V2.9.4
CVE-2019-10936	7.5	2%	Oct 10	Affected devices improperly handle large amounts of specially crafted UDP packets Affected: All versions < V2.0
CVE-2019-10943	7.5	1%	Aug 13	A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V2.8.1; All versions >= V2.8.1
CVE-2019-6568	7.5	1%	Apr 17	The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition Affected: All versions < V2.6.1
CVE-2019-6575	7.5	2%	Apr 17	A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions >= V2.5 < V2.6.1
CVE-2017-12741	7.5	3%	Dec 26	Specially crafted packets sent to port 161/udp could cause a denial of service condition Affected: All versions < V2.0
CVE-2018-4843	6.5	1%	Mar 20	A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… Affected: All versions < V1.7.0
CVE-2019-10929	5.9	1%	Aug 13	A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V2.8.1
CVE-2020-28397	5.3	1%	Aug 10	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions > V2.5 < V2.9.2