SIMATIC Drive Controller CPU 1504D TF at a glance
- Last 12 months
- 12
- Critical · all time
- 6
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 8 | 3 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 3 | 2 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 1 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 9.9NCSC-2024-0390 33 CVEs
Kwetsbaarheden verholpen in Siemens producten
Siemens heeft kwetsbaarheden verholpen in diverse producten als Questa/ModelSIM, RUGGEDCOM, SENTRON, SIMATIC, SINEC, Tecnomatix en Teamcenter.
23 results · Feed
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before r…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before includin…
-
Medium 6.1
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in s…
-
Critical 9.6
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before …
-
Critical 9.6
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering…
-
Medium 6.1
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CS…
-
Critical 9.6
Affected devices do not properly restrict executable content contained in imported trace files. This could allow an att…
-
High 7.1
Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote…
-
Critical 9.1
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diag…
-
Critical 9.1
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page…
-
Critical 9.6
Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through …
-
Medium 5.3
The login functionality of the web server in affected devices does not normalize the response times of login attempts. …
-
Medium 5.3
The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' …
-
Medium 4.7
The web server of affected devices does not properly validate input that is used for a user redirection. This could all…
-
High 7.5
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to crea…
-
High 7.5
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could c…
-
Medium 4.6
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on…
-
High 7.5
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 5.5
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 4.9
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an att…
-
Medium 6.5
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenti…