CveMateVulnerability intelligence

Siemens Simatic S7 1500 Software Controller V2 vulnerabilities

7 vulnerabilities

Known vulnerabilities in Siemens Simatic S7 1500 Software Controller V2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-40365siemenssimatic drive controller cpu 1504d tf+1563y ago13-12-2022 00:00

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44693siemenssimatic drive controller cpu 1504d tf+1563y ago13-12-2022 00:00

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44694siemenssimatic drive controller cpu 1504d tf+1523y ago13-12-2022 00:00

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44695siemenssimatic drive controller cpu 1504d tf+1563y ago13-12-2022 00:00

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2025-30033siemensautomation license manager v6.0+1381y ago12-08-2025 11:16

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.CVE-2022-30694siemens6ag1151-8ab01-7ab0_firmware+1973y ago08-11-2022 00:00

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.CVE-2023-28831siemenssimatic braumat+1163y ago12-09-2023 09:32

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.