SS
Product
SIMATIC S7-1500 CPU 1515F-2 PN
21
CVEs
0
On KEV
9.6
Max CVSS
8
New 30D
Severity mix
Critical 6High 3Medium 12Low 0
Watch
Add SIMATIC S7-1500 CPU 1515F-2 PN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-38773 | 6.8 | Jan 10 | Affected devices do not contain an Immutable Root of Trust in Hardware Affected: 0; 0; 0 |
| CVE-2022-30694 | 6.5 | Nov 8 | The login endpoint /FormLogin in affected web services does not apply proper origin checking Affected: All versions; All versions < V2.9.7; All versions < V2.9.7 |
| CVE-2026-63357 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page Affected: 0; 0; 0 |
| CVE-2026-63356 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page Affected: 0; 0; 0 |
| CVE-2026-63355 | 6.1 | Oct 13 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page Affected: 0; 0; 0 |
| CVE-2026-63352 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page Affected: 0; 0; 0 |
| CVE-2026-63351 | 6.1 | Oct 13 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page Affected: 0; 0; 0 |
| CVE-2023-37482 | 5.3 | Feb 11 | The login functionality of the web server in affected devices does not normalize the response times of login attempts Affected: V3.1.0 before V3.1.2 |
| CVE-2024-46887 | 5.3 | Oct 8 | The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint Affected: before V2.9.8; before V2.9.8; before V3.1.4 |
| CVE-2021-44693 | 4.9 | Dec 13 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device Affected: All versions < V2.9.7; All versions < V2.9.7 |
| CVE-2021-44695 | 4.9 | Dec 13 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device Affected: All versions < V2.9.7; All versions < V2.9.7 |
| CVE-2024-46886 | 4.7 | Oct 8 | The web server of affected devices does not properly validate input that is used for a user redirection Affected: before V2.9.8; before V2.9.8; before V3.1.4 |
Showing 12