Product by Siemens
Simatic S7-1500 CPU 1518-4 Pn\/dp Mfp Firmware
13 known vulnerabilities in Simatic S7-1500 CPU 1518-4 Pn\/dp Mfp Firmware (Siemens), 5 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability In CISA KEValso in 33 other products | 7.8 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEValso in 37 other products | 7.8 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEValso in 46 other products | 7.8 | |
| Critical | CVE-2025-39964 | Linux Kernel Race Condition Vulnerability In CISA KEValso in 5 other products | 7.8 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| High | CVE-2023-28831 | Siemens SIMATIC BRAUMAT: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2021-40365 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Input Validation | 7.5 | |
| Medium | CVE-2021-44693 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Specified Quantity in Input | 4.9 | |
| Medium | CVE-2021-44695 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Syntactic Correctness of Input | 4.9 | |
| Medium | CVE-2021-44694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Improper Validation of Specified Type of Input | 5.5 | |
| Medium | CVE-2022-30694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF) | 6.5 | |
| Medium | CVE-2022-38773 | Siemens SIMATIC Drive Controller CPU 1504D TF: Missing Immutable Root of Trust in Hardware | 4.6 |
News
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootcsoonline,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,