Siemens Siplus S7 1500 CPU 1518 4 Pn/Dp MFP vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Siemens Siplus S7 1500 CPU 1518 4 Pn/Dp MFP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2026-25786siemenssimatic drive controller cpu 1504d tf+101
EPSS score
0.54%
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a benign user with appropriate rights accesses the "communication" parameters page, the malicious code would be executed in the scope of their web session.7.8CVE-2023-4911chainguardglibc+276KEV
EPSS score
63.77%
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.6.9CVE-2023-37482siemenssimatic drive controller cpu 1504d tf+91
EPSS score
0.51%
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.7.5CVE-2023-46156siemenssimatic drive controller cpu 1504d tf+79
EPSS score
1.24%
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.7.5CVE-2023-44487akkahttp_server+704KEV
EPSS score
100.00%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.8.7CVE-2023-28831siemenssimatic braumat+116
EPSS score
1.13%
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.