Siemens Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2026-31431 — CVSS 7.8 (high) — actively exploited: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly…
• CVE-2023-4911 — CVSS 7.8 (high) — actively exploited: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This…
• CVE-2023-28831 — CVSS 7.5 (high): The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application…
• CVE-2021-40365 — CVSS 7.5 (high): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2022-30694 — CVSS 6.5 (medium): The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote…
• CVE-2021-3449 — CVSS 5.9 (medium): An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation…
• CVE-2021-44694 — CVSS 5.5 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44695 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2021-44693 — CVSS 4.9 (medium): Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a…
• CVE-2022-38773 — CVSS 4.6 (medium): Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not…