Skip to content
NewA calmer, faster ZeroHour
Advisoryhigh

S7-1500 CPU 1518 MFP Linux subsystem flaws lack a fix

Original title: Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

CISA Advisoriesby CISA ()7 min read3 · 2 reads
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

Firmware V3.1.7 and later on five 1518 and SIPLUS MFP CPUs is affected, including OpenSSH CVE-2021-41617.

Siemens reports many vulnerabilities in the additional GNU/Linux subsystem of firmware V3.1.7 and later for SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP, including SIPLUS variants. The excerpt details CVE-2021-41617, an OpenSSH privilege escalation in non-default configurations before OpenSSH 8.8. No fix is available. Siemens recommends restricting the interactive shell and running only trusted applications.

Unconfirmed: Only CVE-2021-41617 is fully described; the remaining CVE list is not in the excerpt.

Key facts
  • Five order numbers are listed, each at firmware V3.1.7 or later.
  • The advisory cites 428 vulnerability classes and a CVSS figure of 10.
  • CVE-2021-41617 affects sshd in OpenSSH 6.2 through 8.x before 8.8.
  • Helper programs may inherit sshd group privileges when run as another user.
Security assessment · AI, from the article

Impact: Privilege escalation and other Linux-subsystem flaws

ProductAffected
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP>= V3.1.7, including SIPLUS variant
What to do
  1. 1.Limit GNU/Linux subsystem shell access to trusted personnel.
  2. 2.Build and run applications only from trusted sources.
Analyze CVE-2021-41617 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2021-41617
Tags
siemenssimaticopensshicsplc
Vendors
Siemens
Products
SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFPSIPLUS S7-1500 CPU 1518-4 PN/DP MFPOpenSSH
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not…
7.03%

From the original article

7 min read at cisa.gov

View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3. 1. 7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.