Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.0 < V3.1.5

Name: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.0 < V3.1.5
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

58critical222high214medium17low

updated 2026-10-27

vulnerabilities (544)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	no fix	2023-02-03	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-1292US	high7.3	82.6% (100th)	Exploit	no fix	2022-05-03	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-0778US	high7.5	73.2% (99th)	Exploit	no fix	2022-03-15	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2019-6111US	medium5.9	58.2% (99th)	Exploit	no fix	2019-01-31	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-2274US	critical9.8	48.2% (99th)	Exploit	no fix	2022-07-01	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2025-26466US	medium5.9	38.7% (99th)	Exploit	no fix	2025-02-28	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25236US	critical9.8	35.3% (98th)	Exploit	no fix	2022-02-16	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2019-6110US	medium6.8	24.9% (98th)	Exploit	no fix	2019-01-31	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-35737US	high7.5	23.6% (98th)	Exploit	no fix	2022-08-03	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-4304US	medium5.9	23.5% (98th)	Exploit	no fix	2023-02-08	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2017-7376US	critical9.8	23.2% (98th)	Exploit	no fix	2018-02-19	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2020-13777US	high7.4OT high	22.3% (98th)	Exploit	no fix	2020-06-04	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-24329US	high7.5	20.5% (97th)	Exploit	no fix	2023-02-17	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2020-15778US	high7.4	13.7% (96th)	Exploit	no fix	2020-07-24	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2021-22924US	low3.7	6.27% (94th)	Exploit	no fix	2021-08-05	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-5535US	—	5.58% (93rd)	Exploit	no fix	2024-06-27	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-22822US	critical9.8	5.10% (92nd)	Exploit	no fix	2022-01-10	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-23852US	critical9.8	5.08% (92nd)	Exploit	no fix	2022-01-24	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25235US	critical9.8	4.96% (92nd)	Exploit	no fix	2022-02-16	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-2097US	medium5.3OT elevated	4.90% (92nd)	Exploit	no fix	2022-07-05	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25315US	critical9.8	4.82% (92nd)	Exploit	no fix	2022-02-18	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25314US	high7.5	4.82% (92nd)	Exploit	no fix	2022-02-18	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-23990US	high7.5	4.69% (92nd)	Exploit	no fix	2022-01-26	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2021-45960US	high8.8	4.67% (92nd)	Exploit	no fix	2022-01-01	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2021-46143US	high7.8	4.22% (91st)	Exploit	no fix	2022-01-06	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-0464US	high7.5	3.98% (90th)	Exploit	no fix	2023-03-22	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2019-17498US	high8.1	3.81% (90th)	Exploit	no fix	2019-10-21	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-25313US	medium6.5	3.29% (88th)	Exploit	no fix	2022-02-18	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-43680US	high7.5	3.18% (88th)	Exploit	no fix	2022-10-24	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2015-20107US	high7.6	2.78% (86th)	Exploit	no fix	2022-04-13	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2019-18276US	high7.8	2.61% (85th)	Exploit	no fix	2019-11-28	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2021-33560US	high7.5OT elevated	2.37% (84th)	Exploit	no fix	2021-06-08	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-4813US	medium5.9	2.22% (83rd)	Exploit	no fix	2023-09-12	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-28757US	high7.5	2.01% (81st)	Exploit	no fix	2024-03-10	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-35001US	high7.8	1.54% (75th)	Exploit	no fix	2023-07-05	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-26488US	high7.0	1.49% (74th)	Exploit	no fix	2022-03-10	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-8176US	—	1.35% (71st)	Exploit	no fix	2025-03-14	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-5717US	high7.8	0.91% (60th)	Exploit	no fix	2023-10-25	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-6931US	high7.0	0.71% (54th)	Exploit	no fix	2023-12-19	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-1206US	medium5.7	0.63% (50th)	Exploit	no fix	2023-06-30	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-50251US	medium6.2	0.53% (45th)	Exploit	no fix	2024-11-09	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2023-3609US	high7.8	0.49% (42nd)	Exploit	no fix	2023-07-21	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2020-1712US	high7.8	0.46% (39th)	Exploit	no fix	2020-03-31	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2024-56433US	—OT elevated	0.43% (37th)	Exploit	no fix	2024-12-26	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2022-2068US	high7.3	96.4% (100th)	—	no fix	2022-06-21	≤ vers:intdot/>=3.1.0\|<3.1.5
CVE-2020-36228US	high7.5	85.0% (100th)	—	no fix	2021-01-26	≤ vers:intdot/>=3.1.0\|<3.1.5

showing 50 of 544

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write65 CVEs
CWE-125Out-of-bounds Read55 CVEs
CWE-416Use After Free55 CVEs
CWE-20Improper Input Validation47 CVEs
CWE-190Integer Overflow or Wraparound44 CVEs
CWE-476NULL Pointer Dereference43 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer32 CVEs
CWE-400Uncontrolled Resource Consumption27 CVEs

sources (1)

Which sources assert this record, and when.

DESiemens ProductCERT (CSAF)544 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan