Home / Items
Industrial control advisoryKnown exploitedSeverity 10.0 criticalExploit likelihood 38%
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
ICSA-26-295-11 · CISA · October 13, 2026
Summary
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).
Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
From CISA, quoted as published. Check the source before acting.
What to do
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
Only build and run applications from trusted sources.
Currently no fix is available
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2021-41617 | 7.0 high | No | 2.5% |
| CVE-2023-28531 | 9.8 critical | No | 3.0% |
| CVE-2023-51384 | 5.5 medium | No | 0.4% |
| CVE-2023-52927 | 7.8 high | No | 0.3% |
| CVE-2023-53292 | 5.5 medium | No | 0.1% |
| CVE-2024-26783 | 5.5 medium | No | 0.2% |
| CVE-2024-27056 | 7.8 high | No | 0.3% |
| CVE-2024-28956 | 5.6 medium | No | 0.4% |
| CVE-2024-36903 | 5.6 medium | No | 0.2% |
| CVE-2024-36927 | 4.7 medium | No | 0.2% |
| CVE-2024-42079 | 5.5 medium | No | 0.3% |
| CVE-2024-46786 | 7.8 high | No | 0.2% |
| CVE-2024-47736 | 5.5 medium | No | 0.2% |
| CVE-2024-47809 | 5.5 medium | No | 0.2% |
| CVE-2024-49968 | 5.5 medium | No | 0.2% |
| CVE-2024-49994 | 5.5 medium | No | 0.2% |
| CVE-2024-49998 | 4.7 medium | No | 0.2% |
| CVE-2024-50014 | 5.5 medium | No | 0.2% |
| CVE-2024-50063 | 7.8 high | No | 0.2% |
| CVE-2024-50164 | 7.8 high | No | 0.2% |
| CVE-2024-50298 | 5.5 medium | No | 0.2% |
| CVE-2024-53124 | 7.5 high | No | 0.6% |
| CVE-2024-53170 | 7.8 high | No | 0.2% |
| CVE-2024-54458 | 7.8 high | No | 0.3% |
| CVE-2024-56631 | 7.8 high | No | 0.3% |
| CVE-2024-56703 | 7.5 high | No | 0.5% |
| CVE-2024-56719 | 10.0 critical | No | 0.5% |
| CVE-2024-57917 | 5.7 medium | No | 0.2% |
| CVE-2024-57924 | 5.5 medium | No | 0.3% |
| CVE-2024-57973 | 8.1 high | No | 0.7% |
| CVE-2024-57977 | 5.5 medium | No | 0.2% |
| CVE-2024-57979 | 7.8 high | No | 0.3% |
| CVE-2024-58011 | 5.5 medium | No | 0.2% |
| CVE-2024-58016 | 5.5 medium | No | 0.2% |
| CVE-2024-58020 | 5.5 medium | No | 0.3% |
| CVE-2024-58056 | 5.5 medium | No | 0.2% |
| CVE-2024-58058 | 5.5 medium | No | 0.2% |
| CVE-2024-58061 | 5.5 medium | No | 0.2% |
| CVE-2024-58086 | 7.8 high | No | 0.2% |
| CVE-2025-21645 | 5.5 medium | No | 0.2% |
| CVE-2025-21648 | 5.5 medium | No | 0.2% |
| CVE-2025-21655 | 7.8 high | No | 0.3% |
| CVE-2025-21676 | 7.5 high | No | 0.4% |
| CVE-2025-21682 | 7.3 high | No | 0.2% |
| CVE-2025-21702 | 7.8 high | No | 0.3% |
| CVE-2025-21705 | 5.5 medium | No | 0.2% |
| CVE-2025-21706 | 5.5 medium | No | 0.2% |
| CVE-2025-21707 | 9.8 critical | No | 0.5% |
| CVE-2025-21718 | 7.8 high | No | 0.2% |
| CVE-2025-21731 | 7.8 high | No | 0.2% |
| CVE-2025-21745 | 5.5 medium | No | 0.3% |
| CVE-2025-21758 | 7.8 high | No | 16.9% |
| CVE-2025-21760 | 8.1 high | No | 38.0% |
| CVE-2025-21764 | 7.8 high | No | 0.3% |
| CVE-2025-21765 | 8.1 high | No | 0.6% |
| CVE-2025-21780 | 7.8 high | No | 0.3% |
| CVE-2025-21795 | 7.5 high | No | 0.7% |
| CVE-2025-21796 | 9.8 critical | No | 0.7% |
| CVE-2025-21802 | 5.5 medium | No | 0.2% |
| CVE-2025-21814 | 5.5 medium | No | 0.3% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days). 368 more CVEs in the source.
Affected products
| Vendor | Product |
|---|---|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) |
Why it's on these mode pages
- Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
Change history
- October 13, 2026: Publication Date
- October 22, 2026: Initial CISA Republication of Siemens ProductCERT SSA-457936 advisory
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com