Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

CSIRTS triage

What

Multiple vulnerabilities have been identified in the firmware of the product.

Who is affected

Users of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP with firmware version 3.1.6 or higher.

Urgency

Remediation is urgent as the vulnerabilities are actively exploited.

Action

Siemens is preparing fix versions and recommends specific countermeasures.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CISA Cybersecurity Advisories (US · national-cert · site)

Severity

unknown

Published

2026-07-28

Exploitation

Observed in the wild (CISA KEV)

Original advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Exploitation confirmedCVE-2021-41617Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 83% of all scored CVEs.
• Exploitation confirmedCVE-2023-28531Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 81% of all scored CVEs.
• Exploitation confirmedCVE-2023-51384Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 35% of all scored CVEs.
• Exploitation confirmedCVE-2023-52927Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 23% of all scored CVEs.
• Exploitation confirmedCVE-2024-26783Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 16% of all scored CVEs.
• Exploitation confirmedCVE-2024-27056Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 15% of all scored CVEs.
• Exploitation confirmedCVE-2024-28956Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 30% of all scored CVEs.
• Exploitation confirmedCVE-2024-36903Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 14% of all scored CVEs.
• Exploitation confirmedCVE-2024-36927Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 6% of all scored CVEs.
• Exploitation confirmedCVE-2024-42079Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 19% of all scored CVEs.
• Exploitation confirmedCVE-2024-46786Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now.
• Exploitation confirmedCVE-2024-47736Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now.

Referenced CVEs

+305 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• highUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
• medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of servicecert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of servicecert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service and nonspecific attackcert-bund
• high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• high[UPDATE] [high] Linux Kernel: Multiple Vulnerabilitiescert-bund
• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• low[UPDATE] [low] Linux Kernel: Vulnerability allows denial of servicecert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• medium[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund
• high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund

More from CISA Cybersecurity Advisories

• criticalSchneider Electric IGSS2026-07-30
• criticalMikroTik RouterOS2026-07-30
• criticalCISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs2026-07-30
• criticalMZ Automation lib608702026-07-30
• criticalNASA Core Flight System (cFS) Health & Safety (HS) Application2026-07-30