CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:53.

Filters

1 active

Reset filters

Search: SSA-591731

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-591731

SSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web Server

Siemens — SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0)

Siemens ProductCERTcritical

Published

13 October 2026

Last update

13 October 2026

Linked CVEs

CVE-2026-63350 CVE-2026-63351 CVE-2026-63352 CVE-2026-63353 CVE-2026-63354 CVE-2026-63355 CVE-2026-63356 CVE-2026-63357

Affected sectors

Risk evaluation

SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

Mitigation summary

Disable the webserver if not required on the affected systems. Restrict the access to Port 80/tcp and 443/tcp to trusted IP address only

Revision history (1)

Initial publication — 13 October 2026
Publication Date

Official source: Siemens ProductCERT