Siemens Simatic S7 1500 CPU 1515 2 PN vulnerabilities, page 2

28 vulnerabilities

Known vulnerabilities in Siemens Simatic S7 1500 CPU 1515 2 PN, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2019-19281siemens agsimatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants)+166y ago10-03-2020 19:16

EPSS score

1.68%

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.CVE-2019-19300siemensdevelopment/evaluation kits for profinet io: ek-ertec 200+836y ago14-04-2020 00:00

Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a benign user with appropriate rights accesses the "Motion Control Diagnostics" parameters page, the malicious code would be executed in the scope of their web session.CVE-2026-25789siemenssimatic drive controller cpu 1504d tf+1015mo ago12-05-2026 08:21

EPSS score

0.47%

Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file to be uploaded. This would result in malitcious JavaScript execution in the context of the authenticated user's session without requiring the file to be uploaded, potentially leading to session hijacking or credential theft.CVE-2026-25786siemenssimatic drive controller cpu 1504d tf+1015mo ago12-05-2026 08:20

EPSS score

0.54%

Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a benign user with appropriate rights accesses the "communication" parameters page, the malicious code would be executed in the scope of their web session.CVE-2023-37482siemenssimatic drive controller cpu 1504d tf+911y ago11-02-2025 10:26

EPSS score

0.51%

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.CVE-2023-46156siemenssimatic drive controller cpu 1504d tf+792y ago12-12-2023 11:27

EPSS score

1.24%

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.CVE-2023-28831siemenssimatic braumat+1163y ago12-09-2023 09:32

EPSS score

1.13%

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.