Simatic S7 1500 Cpu 1518 4 Pn/Dp Mfp Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic S7 1500 Cpu 1518 4 Pn/Dp Mfp Firmware (f221bb12-f465-5ff2-99ae-7b39d58bdecd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31431 vulnerable 2026-06-08 07:57:15.012881 crypto: algif_aead - Revert to operating out-of-place
HIGH (7.8)
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Published: 2026-04-22T08:15:10.123Z
Updated: 2026-07-15T01:09:17.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4911 vulnerable 2026-06-08 06:16:14.860346 Glibc: buffer overflow in ld.so leading to privilege escalation
HIGH (7.8)
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Published: 2023-10-03T17:25:08.434Z
Updated: 2026-07-14T11:59:00.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44487 vulnerable 2026-06-08 06:12:41.450731 Details available
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published: 2023-10-10T00:00:00.000Z
Updated: 2026-07-14T12:03:17.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28831 vulnerable 2026-06-08 06:02:36.404864 Details available
HIGH (7.5)
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Published: 2023-09-12T09:32:06.153Z
Updated: 2025-11-11T20:20:09.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44695 vulnerable 2026-06-08 05:36:46.728568 Details available
MEDIUM (4.9)
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:45:22.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44694 vulnerable 2026-06-08 05:36:46.707907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44693 vulnerable 2026-06-08 05:36:46.652555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40365 vulnerable 2026-06-08 05:35:17.791618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3449 vulnerable 2026-06-08 05:33:52.189504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.