Is CVE-2021-41617 known to be exploited?

It is not marked known-exploited in this record.

CVE-2021-41617

Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only. Only build and run applications from trusted sources. Monitor Siemens advisories for patch availability.

Quick answers

What is CVE-2021-41617?: Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only. Only build and run applications from trusted sources. Monitor Siemens advisories for patch availability.
How severe is CVE-2021-41617?: critical, CVSS 10
Is CVE-2021-41617 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2021-41617 be mitigated?: Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only. Only build and run applications from trusted sources. Monitor Siemens advisories for patch availability.

CVSS

Vendor

Siemens

Published

Oct 24, 2026 · 05:34

Patch

Unknown / not confirmed

Affected products

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.7, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= V3.1.7, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= V3.1.7, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= V3.1.7

Mitigation

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP Firmware Riddled with 428 Vulnerabilities

A coordinated advisory from CISA and Siemens reveals that multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 and later for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP and SIPLUS variants. The aggregate count of 428 vulnerabilities includes types such as buffer overflows, type confusion, race conditions, privilege escalation, and information exposure. Siemens states that fixes are being prepared but are not yet available, and recommends limiting interactive shell access and sourcing applications only from trusted origins as immediate mitigations.

12m

CVE-2021-41617

Quick answers

Related News

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP Firmware Riddled with 428 Vulnerabilities