SS
Product
SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN
19
CVEs
0
On KEV
9.6
Max CVSS
8
New 30D
Severity mix
Critical 6High 3Medium 10Low 0
Watch
Add SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63354 | 9.6 | Oct 13 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page Affected: 0 |
| CVE-2026-63353 | 9.6 | Oct 13 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page Affected: 0 |
| CVE-2026-63350 | 9.6 | Oct 13 | Affected devices do not properly restrict executable content contained in imported trace files Affected: 0 |
| CVE-2025-40943 | 9.6 | Mar 10 | Affected devices do not properly sanitize contents of trace files Affected: before V2.9.9 |
| CVE-2026-25787 | 9.1 | May 12 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface Affected: before V2.9.9 |
| CVE-2026-25786 | 9.1 | May 12 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface Affected: before V2.9.9 |
| CVE-2023-46156 | 7.5 | Dec 12 | Affected devices improperly handle specially crafted packets sent to port 102/tcp Affected: 0 |
| CVE-2023-28831 | 7.5 | Sep 12 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during… Affected: before V2.9.7 |
| CVE-2026-25789 | 7.1 | May 12 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page Affected: before V2.9.9 |
| CVE-2022-38773 | 6.8 | Jan 10 | Affected devices do not contain an Immutable Root of Trust in Hardware Affected: 0 |
| CVE-2022-30694 | 6.5 | Nov 8 | The login endpoint /FormLogin in affected web services does not apply proper origin checking Affected: All versions < V2.9.7 |
| CVE-2026-63357 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page Affected: 0 |
| CVE-2026-63356 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page Affected: 0 |
| CVE-2026-63355 | 6.1 | Oct 13 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page Affected: 0 |
| CVE-2026-63352 | 6.1 | Oct 13 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page Affected: 0 |
| CVE-2026-63351 | 6.1 | Oct 13 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page Affected: 0 |
| CVE-2024-46887 | 5.3 | Oct 8 | The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint Affected: before V2.9.8 |
| CVE-2021-44695 | 4.9 | Dec 13 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device Affected: All versions < V2.9.7 |
| CVE-2021-44693 | 4.9 | Dec 13 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device Affected: All versions < V2.9.7 |
Showing 19