Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP Firmware Riddled with 428 Vulnerabilities
Critical GNU/Linux subsystem flaws affect industrial controllers deployed worldwide; Siemens advises mitigations while patches are prepared
Key Takeaways
- 428 vulnerabilities identified in the GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.7 and later.
- Affected products span standard and SIPLUS variants deployed worldwide in critical infrastructure sectors.
- No patch is currently available; Siemens is preparing fixes.
- Mitigations include restricting interactive shell access and sourcing applications from trusted origins.
- CISA and Siemens advisory ICSA-26-295-11 documents the findings.
Related Security News
Researchers Disarm Vulnerable Updater in Abandoned Time4Popcorn App
Security researchers have remotely disabled a vulnerable updater component in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client. The flaw could have allowed attackers to execute malicious code with elevated privileges on millions of Windows computers. The intervention closed the security gap before active exploitation was reported.
HPE Patches Eight Maximum-Severity RCE and Auth Bypass Flaws in ArubaOS
Hewlett Packard Enterprise has released security updates to patch 72 vulnerabilities in the Aruba Operating System, including eight flaws rated maximum severity that allow unauthenticated remote code execution and authentication bypass. The updates address critical security gaps in ArubaOS switching and routing platforms.