SS
Product
Simatic S7-1500 Firmware
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 3Low 0
Watch
Add Simatic S7-1500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 1.5 |
| CVE-2020-8744 | 7.8 | Nov 12 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions… Affected: All versions, or not specified |
| CVE-2019-6575 | 7.5 | Apr 17 | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: through 2.5 |
| CVE-2019-6568 | 7.5 | Apr 17 | The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition Affected: before 2.6.1 |
| CVE-2018-16559 | 7.5 | Apr 17 | A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5) Affected: through 1.8.5; 2.0 before 2.5 |
| CVE-2018-16558 | 7.5 | Apr 17 | A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5) Affected: through 1.8.5; 2.0 before 2.5 |
| CVE-2018-13815 | 7.5 | Dec 13 | A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6) Affected: before 2.6 |
| CVE-2018-13805 | 7.5 | Oct 10 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and < V2.5),… Affected: 2.0 before 2.5 |
| CVE-2017-12741 | 7.5 | Dec 26 | Specially crafted packets sent to port 161/udp could cause a denial of service condition Affected: before 2.0 |
| CVE-2018-4843 | 6.5 | Mar 20 | A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… Affected: before 1.7.0 |
| CVE-2017-2681 | 6.5 | May 11 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product Affected: before 2.1 |
| CVE-2017-2680 | 6.5 | May 11 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2) Affected: before 2.1 |
Showing 12