Product by Siemens
Simatic S7-1500 CPU 1511-1 Pn
26 known vulnerabilities in Simatic S7-1500 CPU 1511-1 Pn (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-63350 | Siemens SIMATIC Drive Controller CPU 1504D TF: Eval Injection | 9.6 | |
| Critical | CVE-2026-63354 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 9.6 | |
| Critical | CVE-2026-63353 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 9.6 | |
| High | CVE-2023-28831 | Siemens SIMATIC BRAUMAT: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2023-46156 | Siemens SIMATIC Drive Controller CPU 1504D TF: Use After Free | 7.5 | |
| Critical | CVE-2025-40943 | Siemens SIMATIC Drive Controller CPU 1504D TF: Eval Injection | 9.6 | |
| Critical | CVE-2026-25787 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 9.1 | |
| Critical | CVE-2026-25786 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 9.1 | |
| High | CVE-2025-40820 | Siemens SIDOOR ATD430W: Improper Verification of Source of a Communication Channel | 7.5 | |
| High | CVE-2021-40365 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Input Validation | 7.5 | |
| High | CVE-2025-40833 | Siemens IE/PB LINK HA: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2024-23814 | Siemens SIDOOR ATD430W: Uncontrolled Resource Consumption | 5.3 | |
| Medium | CVE-2026-63357 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-63356 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-63355 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-63352 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-63351 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-46887 | Siemens SIMATIC Drive Controller CPU 1504D TF: Authentication Bypass Using an Alternate Path or Channel | 5.3 | |
| Medium | CVE-2023-37482 | Siemens SIMATIC Drive Controller CPU 1504D TF: Observable Discrepancy | 5.3 | |
| High | CVE-2026-25789 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-site Scripting | 7.1 | |
| Medium | CVE-2021-44693 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Specified Quantity in Input | 4.9 | |
| Medium | CVE-2021-44695 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Syntactic Correctness of Input | 4.9 | |
| Medium | CVE-2021-44694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Specified Type of Input | 5.5 | |
| Medium | CVE-2024-46886 | Siemens SIMATIC Drive Controller CPU 1504D TF: Open Redirect | 4.7 | |
| Medium | CVE-2022-30694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF) | 6.5 |
News
- Siemens Interniche IP-Stackcisa-advisories,