Our takeSiemens published two ICS advisories: a DoS flaw in all versions of SIMATIC S7-PLCSIM Advanced, plus multiple vulnerabilities in the GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.6. Fixes are in preparation; apply the listed mitigations now if you run these.Cyber Resilience desk
Sources (4)
- cisa_advisories · cisa_advisories
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
- cisa_ics · cisa_ics
What this means for you — Security leader:If you run SIMATIC S7-PLCSIM Advanced or S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS), review ICSA-26-209-03/04 and apply Siemens’ interim countermeasures until fix versions ship.
What this means for you — Lean IT orgs:These cover Siemens industrial PLC simulation and controller hardware. Shops that do not run this gear can ignore both advisories.
What this means for you — MSP:Inventory manufacturing and OT clients for S7-PLCSIM Advanced or S7-1500 CPU 1518 MFP; push Siemens’ countermeasures now and track the pending fixes.
What this means for you — Researcher:Two Siemens ICS items: DoS in S7-PLCSIM Advanced (all versions) and multiple flaws in the GNU/Linux subsystem of S7-1500 CPU 1518 firmware V3.1.6; fixes still in preparation.