Skip to content
OpenAdvisories
Medium SSA-054046 1 CVE

SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Published Oct 8, 2024 · Updated Oct 14, 2025 · Revision 8

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) +109 more

Summary

Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #8

    Expanded SIMATIC ET 200SP Open Controller CPU 1515SP PC2 for V2 and V3 CPUs

  2. #7

    Added fix for SIMATIC S7-1500 Software Controller that run on firmware version line V2 and added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs

  3. #6

    Added fix for all S7-1500 CPUs that run on firmware version line V2

  4. #5

    Added fix for SIMATIC S7-1500 Software Controller V3 and updated several product names

  5. #4

    Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

  6. #3

    Added fix for SIMATIC S7-PLCSIM Advanced

  7. #2

    Added fix for SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, CPU 1518-4 PN/DP MFP, CPU 1518F-4 PN/DP MFP, CPU 1518F-4 PN/DP MFP and CPU 1518-4 PN/DP MFP

  8. #1

    Publication Date

References