· zachyceno
EPSS 0.00 (nejvyšší)
Siemens SIMATIC S7 PLCs Web Server
View CSAF Summary SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens SIMATIC S7 PLCs Web Server are affected: SIMATIC Drive Controller CPU 1504D TF …
Siemens US
CVE v události 8
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-63350 | 9.6 3.1 · siemens 9.4 4.0 · siemens | – | 0.00 |
| CVE-2026-63351 | 6.1 3.1 · siemens 5.3 4.0 · siemens | – | 0.00 |
| CVE-2026-63352 | 6.1 3.1 · siemens 5.3 4.0 · siemens | – | 0.00 |
| CVE-2026-63353 | 9.6 3.1 · siemens 9.4 4.0 · siemens | – | 0.00 |
| CVE-2026-63354 | 9.6 3.1 · siemens 9.4 4.0 · siemens | – | 0.00 |
| CVE-2026-63355 | 6.1 3.1 · siemens 5.3 4.0 · siemens | – | 0.00 |
| CVE-2026-63356 | 6.1 3.1 · siemens 5.3 4.0 · siemens | – | 0.00 |
| CVE-2026-63357 | 6.1 3.1 · siemens 5.3 4.0 · siemens | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.