Siemens SIMATIC S7-1500 CPU
Approved changes feed: RSS · Atom
cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic S7 1500 Cpu (fa2d3bcf-6cbf-5507-9a8a-3c15b7001fa6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25622 |
not_vulnerable | 2026-06-08 05:41:46.166596 |
Details available
MEDIUM (5.3)
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Published: 2022-04-12T00:00:00.000Z
Updated: 2025-04-21T13:54:36.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42029 |
not_vulnerable | 2026-06-08 05:35:21.681640 |
Details available
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.
Published: 2022-04-12T09:07:30.000Z
Updated: 2024-08-04T03:22:25.804Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10936 |
not_vulnerable | 2026-06-08 05:12:25.897923 |
Details available
HIGH (7.5)
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Published: 2019-10-10T00:00:00.000Z
Updated: 2024-08-04T22:40:15.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10936 |
vulnerable | 2026-06-08 05:12:25.827083 |
Details available
HIGH (7.5)
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Published: 2019-10-10T00:00:00.000Z
Updated: 2024-08-04T22:40:15.253Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.