Skip to content
NewA calmer, faster ZeroHour
Advisorymedium

Siemens SIPLUS and SIMATIC Products

CISA Advisoriesby CISA ()4 min read2 · 2 reads
Read at cisa.gov
AI summary · grok-4.7Summaries by Vani AI

CISA lists many Siemens SIPLUS and SIMATIC products in an advisory tied to a Linux kernel crypto issue.

CISA published an ICS advisory for Siemens SIPLUS and SIMATIC products. The included technical description concerns Linux kernel crypto code in algif_aead, reverting in-place AEAD handling and copying associated data instead. Listed products include many SIMATIC HMI MTP Unified and Comfort panels below V21.2.1, plus SIMATIC CN 4100, IoT2050, IPC IED-OS, S7-1500 TM MFP, and related SIPLUS HMI variants. The excerpt does not give a CVE identifier, CVSS score, or exploitation status.

Key facts
  • CISA advisory covers many Siemens SIPLUS and SIMATIC HMI products.
  • Numerous MTP Unified and Comfort panels are listed below version 21.2.1.
  • The technical note describes a Linux kernel algif_aead crypto change.
  • The provided text states no CVE ID, CVSS score, or exploitation status.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
siemenssimaticsiplusicslinux-kernelcisahmi
Vendors
Siemens
Products
SIMATIC HMISIPLUS HMISIMATIC AX RuntimeSIMATIC CN 4100SIMATIC IoT2050SIMATIC S7-1500
Organizations
CISASiemens

From the original article

4 min read at cisa.gov

View CSAF Summary Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.