Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)

Name: Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

73critical345high529medium19low

updated 2026-10-26

vulnerabilities (1,243)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	3 versions
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	≤ vers:intdot/>=3.1.5
CVE-2026-24858US	—OT critical	86.6% (100th)	KEV	no fix	2026-01-27	≤ vers:unknown/*
CVE-2023-4911US	high7.8OT critical	63.8% (99th)	KEV	no fix	2023-10-03	3 versions
CVE-2025-10585US	critical9.8OT critical	6.06% (93rd)	KEV	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-39964US	medium5.5OT critical	1.57% (75th)	KEV	no fix	2025-10-13	3 versions
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	no fix	2025-11-17	≤ vers:unknown/*
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	3 versions
CVE-2026-43284US	—	94.2% (100th)	Exploit	no fix	2026-05-08	2 versions
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	3 versions
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	no fix	2023-02-03	2 versions
CVE-2024-2961US	—	88.3% (100th)	Exploit	no fix	2024-04-17	3 versions
CVE-2022-1292US	high7.3	82.6% (100th)	Exploit	no fix	2022-05-03	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	2 versions
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	no fix	2023-10-18	4 versions
CVE-2025-6965US	high7.7	73.5% (99th)	Exploit	no fix	2025-07-15	≤ vers:unknown/*
CVE-2022-0778US	high7.5	73.2% (99th)	Exploit	no fix	2022-03-15	3 versions
CVE-2019-6111US	medium5.9	58.2% (99th)	Exploit	no fix	2019-01-31	2 versions
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	3 versions
CVE-2022-2274US	critical9.8	48.2% (99th)	Exploit	no fix	2022-07-01	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2025-0133US	—	46.3% (99th)	Exploit	no fix	2025-05-14	≤ vers:all/>=v3.1.0
CVE-2025-26466US	medium5.9	38.7% (99th)	Exploit	no fix	2025-02-28	2 versions
CVE-2022-25236US	critical9.8	35.3% (98th)	Exploit	no fix	2022-02-16	2 versions
CVE-2019-6110US	medium6.8	24.9% (98th)	Exploit	no fix	2019-01-31	2 versions
CVE-2022-35737US	high7.5	23.6% (98th)	Exploit	no fix	2022-08-03	2 versions
CVE-2022-4304US	medium5.9	23.5% (98th)	Exploit	V3.0.3	2023-02-08	2 versions
CVE-2017-7376US	critical9.8	23.0% (98th)	Exploit	no fix	2018-02-19	2 versions
CVE-2020-13777US	high7.4OT high	22.3% (98th)	Exploit	no fix	2020-06-04	2 versions
CVE-2023-24329US	high7.5	20.5% (97th)	Exploit	no fix	2023-02-17	2 versions
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	3 versions
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	3 versions
CVE-2020-15778US	high7.4	13.7% (96th)	Exploit	no fix	2020-07-24	2 versions
CVE-2026-46300US	high7.8	10.2% (96th)	Exploit	no fix	2026-05-23	2 versions
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	no fix	2025-02-18	4 versions
CVE-2021-22924US	low3.7	6.27% (94th)	Exploit	no fix	2021-08-05	2 versions
CVE-2024-5535US	—	5.58% (93rd)	Exploit	no fix	2024-06-27	2 versions
CVE-2022-22822US	critical9.8	5.10% (92nd)	Exploit	no fix	2022-01-10	2 versions
CVE-2022-23852US	critical9.8	5.08% (92nd)	Exploit	no fix	2022-01-24	2 versions
CVE-2022-25235US	critical9.8	4.96% (92nd)	Exploit	no fix	2022-02-16	2 versions
CVE-2022-2097US	medium5.3OT elevated	4.90% (92nd)	Exploit	no fix	2022-07-05	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25315US	critical9.8	4.82% (92nd)	Exploit	no fix	2022-02-18	2 versions
CVE-2022-25314US	high7.5	4.82% (92nd)	Exploit	no fix	2022-02-18	2 versions
CVE-2023-6246US	high7.8	4.79% (92nd)	Exploit	no fix	2024-01-31	3 versions
CVE-2022-23990US	high7.5	4.69% (92nd)	Exploit	no fix	2022-01-26	2 versions
CVE-2021-45960US	high8.8	4.67% (92nd)	Exploit	no fix	2022-01-01	2 versions
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2026-46333US	—	4.30% (91st)	Exploit	no fix	2026-05-15	3 versions
CVE-2021-46143US	high7.8	4.22% (91st)	Exploit	no fix	2022-01-06	2 versions
CVE-2023-0464US	high7.5	3.98% (90th)	Exploit	no fix	2023-03-22	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2019-17498US	high8.1	3.81% (90th)	Exploit	no fix	2019-10-21	2 versions

showing 50 of 1,243

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation305 CVEs
CWE-416Use After Free144 CVEs
CWE-476NULL Pointer Dereference131 CVEs
CWE-125Out-of-bounds Read109 CVEs
CWE-787Out-of-bounds Write104 CVEs
CWE-190Integer Overflow or Wraparound71 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer67 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')63 CVEs

sources (3)

Which sources assert this record, and when.

USCISA CSAF OT advisories (ICS)1,102 CVEs
DESiemens ProductCERT (CSAF)1,094 CVEs
NLNCSC-NL (CSAF)186 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan