Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic S7 1500 Cpu 1518 4 Pn/Dp Mfp Firmware (f221bb12-f465-5ff2-99ae-7b39d58bdecd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38773 vulnerable 2026-06-08 05:47:17.275208 Details available
MEDIUM (4.6)
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Published: 2023-01-10T11:39:37.547Z
Updated: 2025-04-03T15:37:09.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30694 vulnerable 2026-06-08 05:43:38.962509 Details available
MEDIUM (6.5)
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.