SS
Product
SIMATIC S7-1500 CPU 1516pro-2 PN
15
CVEs
0
On KEV
9.6
Max CVSS
8
New 30D
Severity mix
Critical 6High 1Medium 8Low 0
Watch
Add SIMATIC S7-1500 CPU 1516pro-2 PN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63357 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page Affected: 0 |
| CVE-2026-63356 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page Affected: 0 |
| CVE-2026-63355 | 6.1 | Oct 13 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page Affected: 0 |
| CVE-2026-63352 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page Affected: 0 |
| CVE-2026-63351 | 6.1 | Oct 13 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page Affected: 0 |
| CVE-2023-37482 | 5.3 | Feb 11 | The login functionality of the web server in affected devices does not normalize the response times of login attempts Affected: V3.1.0 before V3.1.2 |
| CVE-2024-46887 | 5.3 | Oct 8 | The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint Affected: before V3.1.4 |
| CVE-2024-46886 | 4.7 | Oct 8 | The web server of affected devices does not properly validate input that is used for a user redirection Affected: before V3.1.4 |
Showing 8