Home/Product/siemens simatic s7 1500 software controller
Product

siemens simatic s7 1500 software controller

12 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2022-30694
all versions
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated re
6.5MEDIUM
 CVE-2022-38465
< 21.9
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller C
9.3CRITICAL
 CVE-2021-37205
all versions
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Co
7.5HIGH
 CVE-2021-37204
all versions
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (A
7.5HIGH
 CVE-2021-37185
all versions
A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Co
7.5HIGH
 CVE-2020-28397
>= 2.5 and < 21.9
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller C
5.3MEDIUM
 CVE-2020-15782
all versions
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller C
9.8CRITICAL
 CVE-2020-7580
< 21.8
A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions
6.7MEDIUM
 CVE-2019-10943
< 20.8
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP
7.5HIGH
 CVE-2019-6575
<= 2.5
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (in
7.5HIGH
 CVE-2019-6568
< 2.7
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may ca
7.5HIGH
 CVE-2017-2681
< 2.1
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of s
6.5MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin