Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7

Name: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical53high225medium0low

updated 2026-10-28

vulnerabilities (428)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-39964US	medium5.5OT critical	1.57% (75th)	KEV	no fix	2025-10-13	≤ vers:intdot/>=3.1.7
CVE-2026-46333US	—	4.30% (91st)	Exploit	no fix	2026-05-15	≤ vers:intdot/>=3.1.7
CVE-2021-41617US	high7.0OT elevated	2.54% (85th)	Exploit	no fix	2021-09-26	≤ vers:intdot/>=3.1.7
CVE-2026-31402US	—	1.20% (68th)	Exploit	no fix	2026-04-03	≤ vers:intdot/>=3.1.7
CVE-2026-23231US	high7.8	1.03% (64th)	Exploit	no fix	2026-03-04	≤ vers:intdot/>=3.1.7
CVE-2026-43499US	—	0.89% (59th)	Exploit	no fix	2026-05-21	≤ vers:intdot/>=3.1.7
CVE-2026-43501US	—	0.73% (54th)	Exploit	no fix	2026-05-21	≤ vers:intdot/>=3.1.7
CVE-2026-23003US	medium5.5	0.55% (46th)	Exploit	no fix	2026-01-25	≤ vers:intdot/>=3.1.7
CVE-2026-23111US	high7.8	0.52% (44th)	Exploit	no fix	2026-02-13	≤ vers:intdot/>=3.1.7
CVE-2026-64560US	—	0.50% (43rd)	Exploit	no fix	2026-07-29	≤ vers:intdot/>=3.1.7
CVE-2025-61984US	—	0.46% (40th)	Exploit	no fix	2025-10-06	≤ vers:intdot/>=3.1.7
CVE-2023-52927US	high7.8	0.32% (24th)	Exploit	no fix	2025-03-14	≤ vers:intdot/>=3.1.7
CVE-2025-39866US	high7.8	0.31% (24th)	Exploit	no fix	2025-09-19	≤ vers:intdot/>=3.1.7
CVE-2026-52943US	—	0.30% (23rd)	Exploit	no fix	2026-06-24	≤ vers:intdot/>=3.1.7
CVE-2026-23005US	medium5.5	0.22% (12th)	Exploit	no fix	2026-01-25	≤ vers:intdot/>=3.1.7
CVE-2026-23010US	high7.8	0.20% (10th)	Exploit	no fix	2026-01-25	≤ vers:intdot/>=3.1.7
CVE-2026-52910US	—	0.14% (4th)	Exploit	no fix	2026-06-19	≤ vers:intdot/>=3.1.7
CVE-2026-23398US	medium5.5	0.13% (3rd)	Exploit	no fix	2026-03-26	≤ vers:intdot/>=3.1.7
CVE-2025-21760US	—	38.0% (99th)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2025-21758US	medium5.5	16.9% (97th)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2023-28531US	critical9.8OT elevated	2.99% (87th)	—	no fix	2023-03-17	≤ vers:intdot/>=3.1.7
CVE-2026-3497US	high7.5	2.22% (83rd)	—	no fix	2026-03-12	≤ vers:intdot/>=3.1.7
CVE-2026-23455US	—	1.53% (75th)	—	no fix	2026-04-03	≤ vers:intdot/>=3.1.7
CVE-2026-27135US	—	0.80% (57th)	—	no fix	2026-03-18	≤ vers:intdot/>=3.1.7
CVE-2025-68349US	—	0.71% (53rd)	—	no fix	2025-12-24	≤ vers:intdot/>=3.1.7
CVE-2025-68206US	—	0.71% (53rd)	—	no fix	2025-12-16	≤ vers:intdot/>=3.1.7
CVE-2025-68782US	—	0.69% (53rd)	—	no fix	2026-01-13	≤ vers:intdot/>=3.1.7
CVE-2025-40135US	—	0.69% (53rd)	—	no fix	2025-11-12	≤ vers:intdot/>=3.1.7
CVE-2025-21796US	—	0.67% (52nd)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2025-21795US	medium5.5	0.67% (52nd)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2024-57973US	medium5.5	0.67% (52nd)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2026-40355US	high7.5	0.65% (51st)	—	no fix	2026-04-28	≤ vers:intdot/>=3.1.7
CVE-2026-31682US	—	0.64% (50th)	—	no fix	2026-04-25	≤ vers:intdot/>=3.1.7
CVE-2026-52986US	—	0.63% (50th)	—	no fix	2026-06-24	≤ vers:intdot/>=3.1.7
CVE-2026-23242US	—	0.61% (49th)	—	no fix	2026-03-18	≤ vers:intdot/>=3.1.7
CVE-2025-21765US	medium5.5	0.61% (49th)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2026-52999US	—	0.59% (48th)	—	no fix	2026-06-24	≤ vers:intdot/>=3.1.7
CVE-2026-43011US	—	0.59% (48th)	—	no fix	2026-05-01	≤ vers:intdot/>=3.1.7
CVE-2024-53124US	medium4.7	0.59% (48th)	—	no fix	2024-12-02	≤ vers:intdot/>=3.1.7
CVE-2026-52998US	—	0.58% (47th)	—	no fix	2026-06-24	≤ vers:intdot/>=3.1.7
CVE-2026-64545US	—	0.58% (47th)	—	no fix	2026-07-27	≤ vers:intdot/>=3.1.7
CVE-2026-31563US	—	0.56% (47th)	—	no fix	2026-04-24	≤ vers:intdot/>=3.1.7
CVE-2025-40261US	—	0.56% (47th)	—	no fix	2025-12-04	≤ vers:intdot/>=3.1.7
CVE-2025-37917US	medium5.5	0.56% (46th)	—	no fix	2025-05-20	≤ vers:intdot/>=3.1.7
CVE-2026-31414US	—	0.56% (46th)	—	no fix	2026-04-13	≤ vers:intdot/>=3.1.7
CVE-2025-68337US	—	0.55% (46th)	—	no fix	2025-12-22	≤ vers:intdot/>=3.1.7
CVE-2025-68261US	—	0.55% (46th)	—	no fix	2025-12-16	≤ vers:intdot/>=3.1.7
CVE-2025-21707US	medium5.5	0.54% (45th)	—	no fix	2025-02-27	≤ vers:intdot/>=3.1.7
CVE-2024-56719US	medium5.5	0.54% (45th)	—	no fix	2024-12-29	≤ vers:intdot/>=3.1.7
CVE-2025-71120US	medium5.5	0.53% (45th)	—	no fix	2026-01-14	≤ vers:intdot/>=3.1.7

showing 50 of 428

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation218 CVEs
CWE-416Use After Free74 CVEs
CWE-476NULL Pointer Dereference70 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')42 CVEs
CWE-401Missing Release of Memory after Effective Lifetime34 CVEs
CWE-125Out-of-bounds Read28 CVEs
CWE-908Use of Uninitialized Resource22 CVEs
CWE-911Improper Update of Reference Count21 CVEs

sources (1)

Which sources assert this record, and when.

DESiemens ProductCERT (CSAF)428 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan