Product by Siemens
Simatic S7-1500 Software Controller
22 known vulnerabilities in Simatic S7-1500 Software Controller (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-15782 | Siemens SIMATIC Drive Controller family: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | |
| High | CVE-2017-12741 | Siemens Development/Evaluation Kits for PROFINET IO: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-37204 | Siemens SIMATIC Drive Controller family: Operation on a Resource after Expiration or Release | 7.5 | |
| High | CVE-2021-37185 | Siemens SIMATIC Drive Controller family: Operation on a Resource after Expiration or Release | 7.5 | |
| High | CVE-2019-10936 | Siemens Development/Evaluation Kits for PROFINET IO: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-19300 | Siemens Development/Evaluation Kits for PROFINET IO: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-19281 | Siemens SIMATIC S7-1500 Software Controller: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-37205 | Siemens SIMATIC Drive Controller family: Missing Release of Memory after Effective Lifetime | 7.5 | |
| High | CVE-2019-6575 | Siemens SIMATIC CP 443-1 OPC UA: Uncaught Exception | 7.5 | |
| High | CVE-2020-15796 | Siemens SIMATIC ET 200SP Open Controller (incl. SIPLUS variants): Uncaught Exception | 7.5 | |
| High | CVE-2018-13805 | Siemens SIMATIC ET 200SP Open Controller: Denial of Service | 7.5 | |
| High | CVE-2023-46156 | Siemens SIMATIC Drive Controller CPU 1504D TF: Use After Free | 7.5 | |
| High | CVE-2019-6568 | Siemens SIMATIC CP 1604: Out-of-bounds Read | 7.5 | |
| High | CVE-2017-2680 | Siemens Development/Evaluation Kits for PROFINET IO: Uncontrolled Resource Consumption | 6.5 | |
| High | CVE-2019-10943 | Siemens SIMATIC: Missing Support for Integrity Check | 7.5 | |
| High | CVE-2017-2681 | Siemens Development/Evaluation Kits for PROFINET IO: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2019-10929 | Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm | 5.9 | |
| Medium | CVE-2020-28397 | Siemens SIMATIC Drive Controller family: Incorrect Authorization | 5.3 | |
| Critical | CVE-2022-38465 | Siemens SIMATIC Drive Controller family: Insufficiently Protected Credentials | 9.3 | |
| Medium | CVE-2018-4843 | Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7: Improper Input Validation | 6.5 | |
| Medium | CVE-2020-7580 | Siemens SIMATIC Automation Tool: Unquoted Search Path or Element | 6.7 | |
| Medium | CVE-2022-30694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF) | 6.5 |