https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:29:21.057492+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-126 certfr-2014-avi-126 — De multiples vulnérabilités ont été corrigées dans le système SCADA <span class="textit">Siemens SIMATIC</span>. Elles… 2026-10-03T21:29:21.061897+00:00 certfr-2014-avi-126 https://cve.radiocsirt.org/vuln/euvd-2026-98276 EUVD-2026-98276 2026-10-03T21:29:21.061934+00:00 EUVD-2026-98276 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2248 fkie_cve-2014-2248 2026-10-03T21:29:21.061949+00:00

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-m24g-7p8c-8h8f GHSA-m24g-7p8c-8h8f 2026-10-03T21:29:21.061977+00:00

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-2248 gsd-2014-2248 2026-10-03T21:29:21.061992+00:00 gsd-2014-2248 https://cve.radiocsirt.org/vuln/icsa-14-073-01 ICSA-14-073-01 — Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities 2026-10-03T21:29:21.062003+00:00

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors. Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets. Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via c…