[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP5_6xPJngrN5fprggEUwfDtWk41zpd_puweh4ygJoCc":3,"g5a-family:siemens\u002Fsimatic_s7-1500":100,"g5a-ex:siemens\u002Fsimatic_s7-1500@*":130},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":72,"seoMetadata":78,"meta":97},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":17},"siemens","simatic_s7-1500",1,15,"2020-11-12",[13],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"2.0",0,false,"Simatic S7-1500 by Siemens is a technology product with 1 tracked version and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},[21,29,36,41,47,49,54,59,63,68],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"v3.1","High",0.99999,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":35},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","2018-05-22",5.5,"Medium",0.60631,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":40},"CVE-2017-12741","Specially crafted packets sent to port 161\u002Fudp could cause a denial of service condition. The affected devices must be restarted manually.","2017-12-26",0.03315,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":25,"cvssVersion":45,"severity":27,"isKev":16,"epssScore":46},"CVE-2018-16559","A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and \u003C V2.5), SIMATIC S7-1500 CPU (All versions \u003C= V1.8.5). Specially crafted network packets sent to port 80\u002Ftcp or 443\u002Ftcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80\u002Ftcp or 443\u002Ftcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.","2019-04-17","v3.0",0.01986,{"cveId":48,"description":43,"publishedDate":44,"cvssScore":25,"cvssVersion":45,"severity":27,"isKev":16,"epssScore":46},"CVE-2018-16558",{"cveId":50,"description":51,"publishedDate":52,"cvssScore":25,"cvssVersion":45,"severity":27,"isKev":16,"epssScore":53},"CVE-2018-13815","A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions \u003C V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102\u002Ftcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.","2018-12-13",0.01799,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":58},"CVE-2019-19300","A vulnerability has been identified in Development\u002FEvaluation Kits for PROFINET IO: EK-ERTEC 200, Development\u002FEvaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD\u002FTC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC\u002F2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC\u002F0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC\u002F2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN\u002FDP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN\u002FDP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN\u002FDP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN\u002FDP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN\u002FDP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN\u002F2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN\u002F3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN\u002FMF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN\u002FPN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN\u002FDP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN\u002FDP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN\u002FDP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN\u002FDP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN\u002FDP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN\u002FDP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN\u002FDP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN\u002FDP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN\u002FDP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN\u002FDP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN\u002FDP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S\u002FG Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN\u002FDP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN\u002FDP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN\u002FPN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN\u002FDP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN\u002FDP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN\u002FDP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN\u002FDP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN\u002FDP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.","2020-04-14",0.01722,{"cveId":60,"description":61,"publishedDate":44,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":62},"CVE-2019-6575","A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V2.7), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants) (All versions \u003C V15.1 Upd 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V15.1 Upd 4), SIMATIC IPC DiagMonitor (All versions \u003C V5.1.3), SIMATIC NET PC Software V13 (All versions), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC RF188C (All versions \u003C V1.1.0), SIMATIC RF600R family (All versions \u003C V3.2.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 \u003C V2.6.1), SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)), SIMATIC WinCC OA (All versions \u003C V3.15 P018), SIMATIC WinCC Runtime Advanced (All versions \u003C V15.1 Upd 4), SINEC NMS (All versions \u003C V1.0 SP1), SINEMA Server (All versions \u003C V14 SP2), SINUMERIK OPC UA Server (All versions \u003C V2.1), TeleControl Server Basic (All versions \u003C V3.1.1). Specially crafted network packets sent to affected devices on port 4840\u002Ftcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.",0.01646,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":25,"cvssVersion":45,"severity":27,"isKev":16,"epssScore":67},"CVE-2018-13805","A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and \u003C V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and \u003C V2.5), SIMATIC S7-1500 incl. F (All versions >= V2.0 and \u003C V2.5). An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to communicate over the network. This vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. An attacker could use this vulnerability to compromise availability of the network connectivity. At the time of advisory publication no public exploitation of this vulnerability was known.","2018-10-10",0.01533,{"cveId":69,"description":70,"publishedDate":44,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":71},"CVE-2019-6568","The webserver of the affected devices contains a vulnerability that may lead to\r\na denial of service condition. An attacker may cause a denial of service\r\nsituation which leads to a restart of the webserver of the affected device.\r\n\r\nThe security vulnerability could be exploited by an attacker with network\r\naccess to the affected systems. Successful exploitation requires no system\r\nprivileges and no user interaction. An attacker could use the vulnerability\r\nto compromise availability of the device.",0.01401,[73],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"severity":27,"isKev":4,"epssScore":28,"cisaVulnName":74,"cisaDateAdded":75,"cisaShortDescription":76,"cisaRequiredAction":77},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.","Apply updates per vendor instructions.",{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Simatic S7-1500 by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic S7-1500 by Siemens covering 1 version with 15 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic S7-1500 vulnerabilities, Simatic S7-1500 security, Simatic S7-1500 CVE, Siemens Simatic S7-1500, Simatic S7-1500 threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Simatic S7-1500 KEV, Simatic S7-1500 exploited vulnerabilities",{"@context":83,"@type":84,"name":85,"description":80,"url":86,"manufacturer":87,"applicationCategory":91,"softwareVersion":92,"mainEntity":93},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic S7-1500","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_s7-1500",{"@type":88,"name":89,"url":90},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","1 versions tracked",{"@type":94,"name":95,"description":96,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Simatic S7-1500 Security Vulnerabilities","Security vulnerabilities affecting Simatic S7-1500 by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":98,"apiVersion":99},"2026-10-19T01:15:05.047Z","3.0",[101,104,107,110,113,115,117,120,122,124,126,128],{"product":102,"cves":103},"simatic_s7-1500_software_controller",19,{"product":105,"cves":106},"simatic_s7-1500_cpu_firmware",14,{"product":108,"cves":109},"simatic_s7-1500_firmware",13,{"product":111,"cves":112},"simatic_s7-1500_cpu_1511-1_pn",11,{"product":114,"cves":112},"simatic_s7-1500_cpu_1515-2_pn",{"product":116,"cves":112},"simatic_s7-1500_cpu_1513-1_pn",{"product":118,"cves":119},"simatic_s7-1500_cpu_1512sp-1",10,{"product":121,"cves":119},"simatic_s7-1500_cpu_1510sp",{"product":123,"cves":119},"simatic_s7-1500_cpu_1512spf-1",{"product":125,"cves":119},"simatic_s7-1500_cpu_1510sp-1",{"product":127,"cves":119},"simatic_s7-1500_cpu_1511t-1",{"product":129,"cves":119},"simatic_s7-1500_cpu_1511tf-1",{"rows":131,"total":9,"capped":16,"failed":15},[132],{"cveId":22,"name":74,"severity":27,"cvss":25,"added":75,"epss":28,"published":133,"ranges":134,"checked":4,"hits":135,"covers":16},"2014-04-07T22:55:03.893",[],[]]