SIMATIC S7-1500

Search everything

Mentions · 7d1
Mentions · 30d2
All mentions3
First seenSep 22, 2026
Last mentioned3d ago

Timeline

3 articles · newest first

SIMATIC S7-1500 web server flaws can hijack authorized browser sessions

All listed firmware versions are affected, Siemens is still preparing fixes, and eight CVEs are named.

CISA AdvisoriesOct 22, 12:00 UTC · 3d agoVulnerabilityCVE-2026-63350 CVE-2026-63351 CVE-2026-63352+51

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.

SecurityWeekOct 14, 15:15 UTC · 11d agoVulnerability2

Siemens SIPLUS and SIMATIC Products

CISA lists many Siemens SIPLUS and SIMATIC products in an advisory tied to a Linux kernel crypto issue.

CISA AdvisoriesSep 22, 12:00 UTC · Sep 22, 2026Advisory1 · 1 read

Related CVEs

by mentions

CVE-2026-633549.4
XSS via CSV trace import on Siemens PLC web UI
published 12d agoSiemens Devices with a web-server Trace page that import CSV trace files and can issue PLC operations (product names and version
CVE-2026-633539.4
XSS in Siemens Trace import via unsanitized comments
published 12d agoSiemens
CVE-2026-633509.4
JavaScript injection via imported trace files in Siemens devices
published 12d agoSiemens
CVE-2026-633565.3
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace…
published 12d ago
CVE-2026-633555.3
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page
published 12d ago
CVE-2026-633515.3
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on…
published 12d ago
CVE-2026-633525.3
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page
published 12d ago
CVE-2026-633575.3
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page
published 12d ago

Appears with

Siemensvendor · 3
CISAorganization · 2
Sage RTUproduct · 1
ABBvendor · 1
Rockwell Automationvendor · 1
Ruggedcom Crossbowproduct · 1
SIMATIC HMIproduct · 1
Harmony STW6product · 1
Johnson Controlsvendor · 1
SIMATIC IoT2050product · 1
Ignitionproduct · 1
Pro-face STW6000product · 1
1732E ArmorBlockproduct · 1
Siemensorganization · 1
dynovaPROproduct · 1
Hitachi Energyvendor · 1

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.