CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 8 November 2026 at 07:47.

Filters

1 active

Reset filters

Search: ICSA-26-209-04

Vendor

Protocol

Sector

Severity

Source

1 advisories found

ICSA-26-209-04

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Siemens — SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)

CISAcritical

Published

14 July 2026

Last update

28 July 2026

Linked CVEs

CVE-2021-41617 CVE-2023-28531 CVE-2023-51384 CVE-2023-52927 CVE-2024-26783 CVE-2024-27056 CVE-2024-28956 CVE-2024-36903 CVE-2024-47809 CVE-2024-49998 CVE-2025-39964 CVE-2026-31431 CVE-2026-43284 CVE-2026-46300 CVE-2026-46333

Affected sectors

Risk evaluation

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Mitigation summary

Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

Revision history (2)

Initial publication — 14 July 2026
Publication Date
Update A — 28 July 2026
Initial CISA Republication of Siemens ProductCERT SSA-019113 advisory

Official source: CISA