Critical Check your exposure CVSS 10.0
Siemens S7-1500 MFP controllers have many flaws in Linux subsystem
CISA ICS AdvisoriesSiemens · Critical Manufacturing, Transportation Systems, Energy
What happened. Multiple flaws exist in the extra GNU/Linux subsystem of firmware V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP, including the SIPLUS variant. Siemens is preparing fixes and recommends mitigations where none are available yet.
Who is affected. SIMATIC S7-1500 CPU 1518-4 PN/DP MFP and 1518F-4 PN/DP MFP at V3.1.7 or later, plus the SIPLUS S7-1500 CPU 1518-4 PN/DP MFP variant.
What to do. Check whether you run the affected S7-1500 CPU 1518 MFP models on firmware V3.1.7 or later. Apply Siemens' recommended mitigations until fixes are released.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L1
Why: The SIMATIC S7-1500 CPU is a programmable logic controller (PLC), which sits at Purdue level 1.
- Are you exposed?
Check the asset inventory for S7-1500 CPU 1518(F)-4 PN/DP MFP order numbers 6ES7518-4AX00 or 6ES7518-4FX00, and 6AG1518-4AX00, running firmware V3.1.7 or later.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.