Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1_pn:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic S7 1500 Cpu 1513F 1 Pn (c0a0a89d-c7b0-5236-9506-ad665b52d6ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46156 not_vulnerable 2026-06-08 06:12:44.172290 Details available
HIGH (7.5)
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
Published: 2023-12-12T11:27:10.086Z
Updated: 2026-02-25T16:34:35.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28831 not_vulnerable 2026-06-08 06:02:36.366422 Details available
HIGH (7.5)
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Published: 2023-09-12T09:32:06.153Z
Updated: 2025-11-11T20:20:09.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38773 not_vulnerable 2026-06-08 05:47:17.255349 Details available
MEDIUM (4.6)
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Published: 2023-01-10T11:39:37.547Z
Updated: 2025-04-03T15:37:09.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30694 not_vulnerable 2026-06-08 05:43:38.924075 Details available
MEDIUM (6.5)
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44695 not_vulnerable 2026-06-08 05:36:46.722101 Details available
MEDIUM (4.9)
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:45:22.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44694 not_vulnerable 2026-06-08 05:36:46.705086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44693 not_vulnerable 2026-06-08 05:36:46.607769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42029 not_vulnerable 2026-06-08 05:35:21.682628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40365 not_vulnerable 2026-06-08 05:35:17.741669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19300 not_vulnerable 2026-06-08 05:13:22.007709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.