VDB
SSA-398330
SSA-398330
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 ( https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) | ||
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) | ||
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) | ||
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) | ||
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) |
Exploit Intelligence
- Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed (github-poc-repo)
- Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed (github-poc-repo)
- An example exploit for CVE-2017-7376 (github-poc-repo)
- An example exploit for CVE-2017-7376 (github-poc-repo)
- CVE-2019-6111 vulnerability exploitation (github-poc-repo)
- CVE-2019-6111 vulnerability exploitation (github-poc-repo)
- M-ensimag/CVE-2019-18276 (github-poc-repo)
- M-ensimag/CVE-2019-18276 (github-poc-repo)
- SABI-Ensimag/CVE-2019-18276 (github-poc-repo)
- SABI-Ensimag/CVE-2019-18276 (github-poc-repo)
…and 442 more exploits
Timeline
- Dec 12, 2023 CVE Published
- Aug 12, 2025 CVE Updated