Incorrect authorization in Siemens SIMATIC Drive Controller family
Priority LOW 25CWE-863Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-863.
Summary
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.
Why it matters now
EPSS 0.00752 55th percentileScored 2026-11-07
Fix Fixed SIMATIC Drive Controller family (Siemens): V2.9.2SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (Siemens): V21.9
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC Drive Controller family | before V2.9.2 | V2.9.2 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | before V21.9 | V21.9 | Patch available | CNA |
| Siemens | SIMATIC S7 PLCSIM Advanced | All versions > V2 < V4 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | Version V4.4 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions > V2.5 < V2.9.2 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 Software Controller | All versions > V2.5 < V21.9 | — | No fix listed | CNA |
| Siemens | TIM 1531 IRC (incl. SIPLUS NET variants) | Version V2.1 | — | No fix listed | CNA |
- SIMATIC Drive Controller family VendorSiemens Affected before V2.9.2 Fixed in V2.9.2 Patch available CNA
- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) VendorSiemens Affected before V21.9 Fixed in V21.9 Patch available CNA
- SIMATIC S7 PLCSIM Advanced VendorSiemens Affected All versions > V2 < V4 Fixed in — No fix listed CNA
- SIMATIC S7-1200 CPU family (incl. SIPLUS variants) VendorSiemens Affected Version V4.4 Fixed in — No fix listed CNA
- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) VendorSiemens Affected All versions > V2.5 < V2.9.2 Fixed in — No fix listed CNA
- SIMATIC S7-1500 Software Controller VendorSiemens Affected All versions > V2.5 < V21.9 Fixed in — No fix listed CNA
- TIM 1531 IRC (incl. SIPLUS NET variants) VendorSiemens Affected Version V2.1 Fixed in — No fix listed CNA
CPE configurations NVD · 111
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:cpu_1504d_tf_firmware:*:*:*:*:*:*:*:* | before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1504d_tf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1507d_tf_firmware:*:*:*:*:*:*:*:* | before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1507d_tf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515sp_pc2_tf_firmware:*:*:*:*:*:*:*:* | before 21.9 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515sp_pc2_tf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7_plcsim_advanced_firmware:*:*:*:*:*:*:*:* | 2.0 to before 4.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7_plcsim_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* | 2.5 to before 21.9 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:tim_1531_irc_firmware:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Siemens |
- cpe:2.3:o:siemens:cpu_1504d_tf_firmware:*:*:*:*:*:*:*:* Versions before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1504d_tf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1507d_tf_firmware:*:*:*:*:*:*:*:* Versions before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1507d_tf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515sp_pc2_tf_firmware:*:*:*:*:*:*:*:* Versions before 21.9 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515sp_pc2_tf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7_plcsim_advanced_firmware:*:*:*:*:*:*:*:* Versions 2.0 to before 4.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7_plcsim_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* Versions 2.5 to before 21.9 Vulnerable ·Siemens
- cpe:2.3:o:siemens:tim_1531_irc_firmware:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Siemens
Show 101 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1211c_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1212c_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1212fc_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1214fc_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1214c_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1215fc_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1215c_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1217c_firmware:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1510sp_f-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1510sp_f-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1511-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1511f-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1512sp-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1512sp_f-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1512sp_f-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1513-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1513f-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1516-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1516-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu-1516f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu-1516f-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1510sp-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1510sp-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu1510sp_f-1_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu1510sp_f-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1511-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1511-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1511c-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1511c-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1511f-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1511f-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1511t-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1511t-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1511tf-1pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1511tf-1pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1512c-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1512c-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1512sp-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1512sp_f-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1512sp_f-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1513-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1513f-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1513r-1_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1513r-1_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1513pro_f-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1513pro_f-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515-2_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515f-2_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515f-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515r-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515r-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515t-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515t-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1515tf-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1515tf-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516pro_f-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516pro_f-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516pro-2_pn_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516pro-2_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516-3_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516f-3_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2. | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516f-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516t-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1516tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1516tf-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1517-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1517-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1517f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1517f-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1517t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1517t-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1517tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1517tf-3_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* | 2.5 to before 2.9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1211c_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1212c_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1212fc_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1214fc_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1214c_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1215fc_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1215c_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1217c_firmware:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1510sp_f-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1510sp_f-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1511-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1511f-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1512sp-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1512sp_f-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1512sp_f-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1513-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1513f-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1516-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1516-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu-1516f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu-1516f-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1510sp-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1510sp-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu1510sp_f-1_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu1510sp_f-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1511-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1511-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1511c-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1511c-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1511f-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1511f-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1511t-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1511t-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1511tf-1pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1511tf-1pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1512c-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1512c-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1512sp-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1512sp_f-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1512sp_f-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1513-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1513f-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1513r-1_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1513r-1_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1513pro_f-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1513pro_f-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515-2_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515f-2_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515f-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515r-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515r-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515t-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515t-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1515tf-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1515tf-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516pro_f-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516pro_f-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516pro-2_pn_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516pro-2_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516-3_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516f-3_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2. Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516f-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516t-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1516tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1516tf-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1517-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1517-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1517f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1517f-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1517t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1517t-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1517tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1517tf-3_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions 2.5 to before 2.9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC Drive Controller family (Siemens) Fixed in V2.9.2
- Fix · CNA SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (Siemens) Fixed in V21.9
Timeline
- 2026-10-02 Threatist record created from CVE-2020-28397
- 2026-10-03 Alias added: GHSA-wg3f-fv3w-mw54
References
Sources
- CVE-2020-28397 · CVE Program
- CVE-2020-28397 · NVD
- FIRST EPSS
- GHSA-wg3f-fv3w-mw54 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences