Simatic S7 1500 Software Controller Firmware

simatic_s7-1500_software_controller_firmware

Vendor: Siemens • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-46156 1Siemens 73Simatic Drive Controller Cpu 1504d Tf Firmware Simatic Drive Controller Cpu 1507d Tf FirmwareSimatic Et 200sp Open Control 1515sp Pc2 Firmware+70 more Jun 17, 2026 Dec 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
CVE-2023-28831 1Siemens 78Simatic Cloud Connect 7 Cc712 Firmware Simatic Cloud Connect 7 Cc716 FirmwareSimatic Drive Controller Cpu 1504d Tf Firmware+75 more Jun 17, 2026 Sep 12, 2023 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow...Show more The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.Show less
CVE-2021-44695 1Siemens 96Simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware Simatic S7 1200 Cpu 1211c FirmwareSimatic S7 1200 Cpu 1212c Firmware+93 more Jun 17, 2026 Dec 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-44694 1Siemens 92Simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware Simatic S7 1200 Cpu 1211c FirmwareSimatic S7 1200 Cpu 1212c Firmware+89 more Jun 17, 2026 Dec 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-44693 1Siemens 96Simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware Simatic S7 1200 Cpu 1211c FirmwareSimatic S7 1200 Cpu 1212c Firmware+93 more Jun 17, 2026 Dec 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2021-40365 1Siemens 96Simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware Simatic S7 1200 Cpu 1211c FirmwareSimatic S7 1200 Cpu 1212c Firmware+93 more Jun 17, 2026 Dec 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVE-2020-15796 1Siemens 2Simatic Et 200sp Open Controller Firmware Simatic S7 1500 Software Controller Firmware Jun 17, 2026 Dec 14, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that...Show more A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.Show less
CVE-2017-2680 1Siemens 93Dk Standard Ethernet Controller Firmware Ek Ertec 200 Pn Io FirmwareEk Ertec 200p Pn Io Firmware+90 more May 13, 2026 May 11, 2017 7.1 HIGH· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interf...Show more Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.Show less