[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-siemens-s7-1500-plcs-carry-428-flaws-with-no-fix-yet":10,"sections":43},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":42,"feedback_at":22,"cost_usd":42,"total_tokens":42},12190,"siemens-s7-1500-plcs-carry-428-flaws-with-no-fix-yet","Siemens S7-1500 PLCs Carry 428 Flaws With No Fix Yet","An advisory lists 428 vulnerabilities in the Linux subsystem of five S7-1500 CPU variants, and for now operators get mitigations instead of patches.","Five variants of Siemens' S7-1500 1518 controller have 428 listed vulnerabilities in their built-in Linux environment, and no fix exists yet.\n\nThe advisory covers the SIMATIC S7-1500 CPU 1518-4 PN\u002FDP MFP, the 1518F-4 variant, and the SIPLUS S7-1500 CPU 1518-4 version, across five order numbers. All run firmware V3.1.7 or later. The flaws sit in what Siemens calls the additional GNU\u002FLinux subsystem, not in the controller's core automation code. Siemens said it is preparing fixes. The advisory's headline rating is a CVSS v3 score of 10, the top of the 0-10 scale used to grade severity.\n\nThe weakness types read like a catalog of memory-safety and concurrency bugs: use after free, classic buffer overflows, race conditions, out-of-bounds reads and writes, and plaintext password storage. The listed CVE identifiers run from 2021 through 2025, starting with CVE-2021-41617, an OpenSSH privilege escalation. A separate \"additional metrics\" entry gives a CVSS 3.1 score of 7.0 (High) alongside CWE-311, missing encryption of sensitive data, with a local attack vector. The advisory does not say which CVE that entry describes, so it should not be read as a rating for the whole set.\n\nUntil patches arrive, Siemens recommends two mitigations: limit access to the Linux subsystem's interactive shell to trusted personnel, and only build and run applications from trusted sources.\n\nThe advisory lists affected sectors including critical manufacturing, energy, transportation, and healthcare, with deployment worldwide. The count is the real lesson here. A PLC, the industrial computer that runs machinery, that bundles a general-purpose Linux environment inherits that environment's entire bug stream. Identifiers spanning four years in one firmware line point to a software stack that accumulates flaws faster than a single release can clear them. That is an inference from the list, not something Siemens states.\n\nSiemens controllers are not a new target for scrutiny; Stuxnet went after them in 2010. The open question is whether Siemens ships one consolidated firmware update or fixes the subsystem in pieces.","[\"siemens\",\"ics-security\",\"plc\",\"vulnerabilities\"]","2026-10-22T12:00:00.000Z","2026-10-22T19:22:31.511Z","2026-10-22T19:22:33.771Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The article attributes the 7.0 (High) score to CVE-2021-41617, but the source lists it under 'Additional Metrics' beside CWE-311 (Missing Encryption of Sensitive Data) with no clear link to that CVE, and it ignores the advisory's headline 'CVSS v3 10' figure; remove or properly qualify the 7.0 attribution, report the 10 figure, and drop the 'count looks less alarming \u002F attacker needs a foothold' framing unless the source supports it.","resolved","security",[32,33,34,35],"siemens","ics-security","plc","vulnerabilities",[37,40],{"name":38,"url":39},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-295-11",{"name":38,"url":41},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-295-16",0,{"sections":44},[45,50,54,59,64,69,74,79,84,89,94,99,104,109],{"name":46,"slug":47,"count":48,"latest_published_at":49},"AI","ai",7065,"2026-10-22T21:51:25.000Z",{"name":51,"slug":30,"count":52,"latest_published_at":53},"Security",1057,"2026-10-22T15:11:26.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Policy","policy",574,"2026-10-22T20:23:48.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Deals","deals",559,"2026-10-22T21:00:00.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Hardware","hardware",288,"2026-10-22T17:25:00.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Consumer Tech","consumer-tech",285,"2026-10-22T22:21:59.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Science","science",215,"2026-10-22T16:37:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",143,"2026-10-22T18:38:47.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Software","software",141,"2026-10-22T20:02:35.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"Dev Tools","dev-tools",122,"2026-10-21T16:00:00.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"General","general",97,"2026-10-22T21:05:05.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"Gaming","gaming",87,"2026-10-22T18:14:24.000Z",{"name":105,"slug":106,"count":107,"latest_published_at":108},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":110,"slug":111,"count":112,"latest_published_at":113},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]