Simatic S7 1500 Software Controller
Vendor:
First CVE: May 11, 2017 · Active for 9 years
12
Total CVEs
Bottom 1%
2.4
Avg CVEs / Year
Bottom 1%
7.3
Avg CVSS
Higher Avg CVSS than 88% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Simatic S7 1500 Software Controller over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 11, 2017
9 years ago
Most Recent CVE
Nov 8, 2022
1,358 days ago
CVE Severity & Scoring
Simatic S7 1500 Software Controller12 CVEs
33%
58%
8%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (16.7%)
Network9 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (8.3%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (91.7%)
Unknown0 (0.0%)
Required1 (8.3%)
Privileges Required
Low1 (8.3%)
High1 (8.3%)
None10 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-15782CRITICAL A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions | May 28, 2021 | 9.8 | 32 | NO | NO |
CVE-2022-38465HIGH A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions | Oct 11, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-37205HIGH A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (A | Feb 9, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-37204HIGH A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP | Feb 9, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-37185HIGH A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (A | Feb 9, 2022 | 7.5 | 25 | NO | NO |
CVE-2019-6575HIGH A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATI | Apr 17, 2019 | 7.5 | 25 | NO | NO |
CVE-2019-6568HIGH The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to | Apr 17, 2019 | 7.5 | 25 | NO | NO |
CVE-2019-10943HIGH A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATI | Aug 13, 2019 | 7.5 | 24 | NO | NO |
CVE-2022-30694MEDIUM The login endpoint /FormLogin in affected web services does not apply proper origin checking.
This could allow authenticated remote attackers to track the activities of other us | Nov 8, 2022 | 6.5 | 23 | NO | NO |
CVE-2020-7580MEDIUM A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 | Jun 10, 2020 | 6.7 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Simatic S7 1500 Software Controller
Top CWEs
Versions
No cataloged versions.