SIMATIC S7-1500 Software Controller vulnerabilities

Product

SIMATIC S7-1500 Software Controller

by Siemens · last CVE Nov 8, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 7Medium 3Low 0

Severity

All severities11 Critical1 High7 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SIMATIC S7-1500 Software Controller to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-15782	9.8	5%	May 28	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions, or not specified
CVE-2022-38465	7.8	0%	Oct 11	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions < V21.9
CVE-2021-37205	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions, or not specified
CVE-2021-37204	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP… Affected: All versions, or not specified
CVE-2021-37185	7.5	2%	Feb 9	A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: All versions, or not specified
CVE-2019-10943	7.5	1%	Aug 13	A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: before 20.8
CVE-2019-6575	7.5	2%	Apr 17	A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: through 2.5
CVE-2019-6568	7.5	1%	Apr 17	The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition Affected: before 2.7
CVE-2020-7580	6.7	0%	Jun 10	A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15… Affected: before 21.8
CVE-2022-30694	6.5	0%	Nov 8	The login endpoint /FormLogin in affected web services does not apply proper origin checking Affected: All versions, or not specified
CVE-2020-28397	5.3	1%	Aug 10	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl Affected: 2.5 before 21.9