Skip to content
OpenAdvisories
High ICSA-21-131-15 2 CVEs

Siemens SIMATIC S7-1500

Published May 11, 2021 · Updated May 6, 2025 · Revision 3

Vendor: Siemens Product: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB- 6ES7518-4AX00-1AC0 6AG1518-4AX00-4AC0 incl. SIPLUS variant) Product: SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Summary

Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities.

In this advisory we take a representative CVE from each advisory:

- “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744

- “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591.

Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

  • Unscored —
    CVE-2020-0591

    Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e…

  • Unscored —
    CVE-2020-8744

    Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, …

Revision history

  1. #3

    Revision - Fixing typos

  2. #2

    Updated specific mitigations; clarified that no remediation is planned

  3. #1

    Publication Date

References