siemens simatic s7-1500 firmware

Name: siemens simatic s7-1500 firmware
Brand: siemens

productUS

cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical8high5medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-0160US	high7.5OT critical	100.0% (100th)	KEV	no fix	2014-04-07	= 1.5
CVE-2018-3639US	medium5.5	60.6% (99th)	Exploit	2.6	2018-05-22	< 2.6
CVE-2017-12741US	high7.5	3.31% (88th)	—	2.0	2017-12-26	< 2.0
CVE-2018-16559US	high7.5	1.99% (80th)	—	2.5	2019-04-17	2 versions
CVE-2018-16558US	high7.5	1.99% (80th)	—	2.5	2019-04-17	2 versions
CVE-2018-13815US	high7.5	1.80% (78th)	—	2.6	2018-12-13	< 2.6
CVE-2019-6575US	high7.5	1.65% (76th)	—	no fix	2019-04-17	≤ 2.5
CVE-2018-13805US	high7.5	1.58% (75th)	—	2.5	2018-10-10	2.0 → 2.5
CVE-2019-6568US	medium5.0	1.40% (72nd)	—	2.6.1	2019-04-17	< 2.6.1
CVE-2017-2680US	medium6.5	1.15% (67th)	—	2.1	2017-05-11	< 2.1
CVE-2017-2681US	medium6.5	0.91% (60th)	—	2.1	2017-05-11	< 2.1
CVE-2018-4843US	medium6.1	0.54% (45th)	—	1.7.0	2018-03-20	< 1.7.0
CVE-2020-8744US	high7.8	0.36% (30th)	—	no fix	2020-11-12	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation8 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-248Uncaught Exception1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.