CVE-2026-31431
highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.034 · 89 %ileexploit · weaponizedCHDEEUNLRUUSadded 2026-05-01remediate by 2026-05-15
required action "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
EPSS · scored 2026-10-22
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100Cabb_psirt
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100abb_psirt
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Server - vE1000abb_psirt
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedRevolution Pi OSkunbus_psirt
Update kernel package linux-image-revpi-v8 to at least Version 6.12.85-revpi0-1+deb12+1
https://packages.revolutionpi.com/pool/main/l/linux-revpi-v8/linux-image-revpi-v8_6.12.85-revpi0-1+deb12+1_arm64.deb - Fixedlinux-image-revpi-v8kunbus_psirt
Update kernel package linux-image-revpi-v8 to at least Version 6.12.85-revpi0-1+deb12+1
https://packages.revolutionpi.com/pool/main/l/linux-revpi-v8/linux-image-revpi-v8_6.12.85-revpi0-1+deb12+1_arm64.deb - FixedIndustrialPI OS 10.06.2025 installed on IndustrialPI 4pilz_psirt
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 23.06.2025 installed on IndustrialPI 4pilz_psirt
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- FixedIndustrialPI OS 25.12.2025 installed on IndustrialPI 4pilz_psirt
Update to Firmware IndustrialPI OS 17.06.2026 or later.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 10.06.2025 installed on IndustrialPI 4pilz_psirt
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 23.06.2025 installed on IndustrialPI 4pilz_psirt
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- Fixedlinux-image-revpi-v8 < 6.12.91-revpi0-rpi-v8 default component of IndustrialPI OS 25.12.2025 installed on IndustrialPI 4pilz_psirt
Update kernel package linux-image-revpi-v8 to version 6.12.91-revpi0-rpi-v8 or higher.
- FixedAPROLabb_psirt
For affected products, software updates should be installed upon availability. Product Patch version - APROL : APROL-AutoYaST-DVD- V4.4-010.10.260602 Until remediated software versions are available, customers are required to conduct a risk assessment of their affected systems and to implement the mitigation measures and workarounds specified in this advisory.
- FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Update to V3.1.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Update to V3.1.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Update to V3.1.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Update to V3.1.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Update to V3.1.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - FixedSIMATIC CN 4100siemens_psirt
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0)siemens_psirt
Update to V21 SP2 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)siemens_psirt
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedAPROLcisa_csaf_ot
For affected products, software updates should be installed upon availability. Product Patch version - APROL : APROL-AutoYaST-DVD- V4.4-010.10.260602 Until remediated software versions are available, customers are required to conduct a risk assessment of their affected systems and to implement the mitigation measures and workarounds specified in this advisory.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100Ccisa_csaf_ot
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100cisa_csaf_ot
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Server - vE1000cisa_csaf_ot
The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- FixedSIMATIC CN 4100cisa_csaf_ot
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825897/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - FixedSIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0)cisa_csaf_ot
Update to V21 SP2 Update 1 or later version TODO: download link missing
- FixedSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)cisa_csaf_ot
Update to V21 Update 2 SR1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825605/ - MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100Cabb_psirt
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100abb_psirt
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Server - vE1000abb_psirt
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationLinux for B&Rabb_psirt
Successful exploitation of the vulnerabilities described in this advisory requires local access to the affected system with low-privileged user credentials. Customers are strongly advised to enforce strict access control policies on all Linux-based systems, ensuring that interactive access is exclusively granted to authorized and trusted personnel. This includes reviewing and hardening user account permissions and disabling unused accounts. Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationX20EDS410abb_psirt
Successful exploitation of the vulnerabilities described in this advisory requires local access to the affected system with low-privileged user credentials. Customers are strongly advised to enforce strict access control policies on all Linux-based systems, ensuring that interactive access is exclusively granted to authorized and trusted personnel. This includes reviewing and hardening user account permissions and disabling unused accounts. Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux Common Debiansiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux Common Debian arm64siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux Platform Container Common Debian Developmentsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux VMWare Developmentsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC CN 4100siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC IPC Industrial Edge Device OS (IED-OS)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationLinux for B&Rcisa_csaf_ot
Successful exploitation of the vulnerabilities described in this advisory requires local access to the affected system with low-privileged user credentials. Customers are strongly advised to enforce strict access control policies on all Linux-based systems, ensuring that interactive access is exclusively granted to authorized and trusted personnel. This includes reviewing and hardening user account permissions and disabling unused accounts. Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationX20EDS410cisa_csaf_ot
Successful exploitation of the vulnerabilities described in this advisory requires local access to the affected system with low-privileged user credentials. Customers are strongly advised to enforce strict access control policies on all Linux-based systems, ensuring that interactive access is exclusively granted to authorized and trusted personnel. This includes reviewing and hardening user account permissions and disabling unused accounts. Refer to section “General security recommendations” for further advise on how to keep your system secure.
- MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100Ccisa_csaf_ot
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100cisa_csaf_ot
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationABB Ability Edgenius >=3.2.0.0|<3.2.4.1 installed on ABB Ability Edgenius Server - vE1000cisa_csaf_ot
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
- MitigationSIMATIC AX Runtime Core Linux Common Debiancisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux Common Debian arm64cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux Platform Container Common Debian Developmentcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC AX Runtime Core Linux VMWare Developmentcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC CN 4100cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC IPC Industrial Edge Device OS (IED-OS)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- MitigationSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.
- WorkaroundRevolution Pi OSkunbus_psirt
Deactivate algif_aead. echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif_aead.conf sudo rmmod algif_aead 2>/dev/null || true lsmod | grep algif_aead # should return nothing
- Workaroundlinux-image-revpi-v8kunbus_psirt
Deactivate algif_aead. echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif_aead.conf sudo rmmod algif_aead 2>/dev/null || true lsmod | grep algif_aead # should return nothing
- WorkaroundLinux for B&Rabb_psirt
Security researchers have identified and validated the following workarounds to reduce exposure to the vulnerabilities described in this advisory. These measures do not remediate the underlying vulnerabilities but effectively block known attack vectors until patched software versions are deployed. Important: Customers are advised to thoroughly test their systems after applying any of the listed workarounds. B&R has no visibility into customer-specific applications running on the underlying Linux system. It is the customer's responsibility to assess whether the applied workarounds interfere with existing application workloads prior to deployment in production environments. For Debian-based systems within an active support lifecycle, kernel patches addressing CVE-2026-31431 are already available via the official package repositories. Customers are strongly encouraged to apply these updates immediately by executing the following command: sudo apt update && sudo apt upgrade A system reboot is required after the upgrade for the updated kernel to take effect. Temporary Mitigation: If an immediate system update is not feasible, the affected kernel module (algif_aead) can be disabled persistently. Security researchers have confirmed this measure effectively prevents exploitation of CVE-2026-31431. Execute the following commands as root: echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true Impact assessment: Disabling the algif_aead module removes the AEAD socket interface from the kernel cryp-to API. This does not affect dm-crypt/LUKS, kTLS, IPsec/XFRM, OpenSSL, GnuTLS, NSS, or SSH. Applications explicitly configured to use the afalg engine or that directly bind aead, skcipher, or hash sockets via AF_ALG may be affected. To assess exposure prior to applying this workaround, run: lsof | grep AF_ALG
- WorkaroundX20EDS410abb_psirt
Security researchers have identified and validated the following workarounds to reduce exposure to the vulnerabilities described in this advisory. These measures do not remediate the underlying vulnerabilities but effectively block known attack vectors until patched software versions are deployed. Important: Customers are advised to thoroughly test their systems after applying any of the listed workarounds. B&R has no visibility into customer-specific applications running on the underlying Linux system. It is the customer's responsibility to assess whether the applied workarounds interfere with existing application workloads prior to deployment in production environments. For Debian-based systems within an active support lifecycle, kernel patches addressing CVE-2026-31431 are already available via the official package repositories. Customers are strongly encouraged to apply these updates immediately by executing the following command: sudo apt update && sudo apt upgrade A system reboot is required after the upgrade for the updated kernel to take effect. Temporary Mitigation: If an immediate system update is not feasible, the affected kernel module (algif_aead) can be disabled persistently. Security researchers have confirmed this measure effectively prevents exploitation of CVE-2026-31431. Execute the following commands as root: echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true Impact assessment: Disabling the algif_aead module removes the AEAD socket interface from the kernel cryp-to API. This does not affect dm-crypt/LUKS, kTLS, IPsec/XFRM, OpenSSL, GnuTLS, NSS, or SSH. Applications explicitly configured to use the afalg engine or that directly bind aead, skcipher, or hash sockets via AF_ALG may be affected. To assess exposure prior to applying this workaround, run: lsof | grep AF_ALG
- WorkaroundLinux for B&Rcisa_csaf_ot
Security researchers have identified and validated the following workarounds to reduce exposure to the vulnerabilities described in this advisory. These measures do not remediate the underlying vulnerabilities but effectively block known attack vectors until patched software versions are deployed. Important: Customers are advised to thoroughly test their systems after applying any of the listed workarounds. B&R has no visibility into customer-specific applications running on the underlying Linux system. It is the customer's responsibility to assess whether the applied workarounds interfere with existing application workloads prior to deployment in production environments. For Debian-based systems within an active support lifecycle, kernel patches addressing CVE-2026-31431 are already available via the official package repositories. Customers are strongly encouraged to apply these updates immediately by executing the following command: sudo apt update && sudo apt upgrade A system reboot is required after the upgrade for the updated kernel to take effect. Temporary Mitigation: If an immediate system update is not feasible, the affected kernel module (algif_aead) can be disabled persistently. Security researchers have confirmed this measure effectively prevents exploitation of CVE-2026-31431. Execute the following commands as root: echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true Impact assessment: Disabling the algif_aead module removes the AEAD socket interface from the kernel cryp-to API. This does not affect dm-crypt/LUKS, kTLS, IPsec/XFRM, OpenSSL, GnuTLS, NSS, or SSH. Applications explicitly configured to use the afalg engine or that directly bind aead, skcipher, or hash sockets via AF_ALG may be affected. To assess exposure prior to applying this workaround, run: lsof | grep AF_ALG
- WorkaroundX20EDS410cisa_csaf_ot
Security researchers have identified and validated the following workarounds to reduce exposure to the vulnerabilities described in this advisory. These measures do not remediate the underlying vulnerabilities but effectively block known attack vectors until patched software versions are deployed. Important: Customers are advised to thoroughly test their systems after applying any of the listed workarounds. B&R has no visibility into customer-specific applications running on the underlying Linux system. It is the customer's responsibility to assess whether the applied workarounds interfere with existing application workloads prior to deployment in production environments. For Debian-based systems within an active support lifecycle, kernel patches addressing CVE-2026-31431 are already available via the official package repositories. Customers are strongly encouraged to apply these updates immediately by executing the following command: sudo apt update && sudo apt upgrade A system reboot is required after the upgrade for the updated kernel to take effect. Temporary Mitigation: If an immediate system update is not feasible, the affected kernel module (algif_aead) can be disabled persistently. Security researchers have confirmed this measure effectively prevents exploitation of CVE-2026-31431. Execute the following commands as root: echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true Impact assessment: Disabling the algif_aead module removes the AEAD socket interface from the kernel cryp-to API. This does not affect dm-crypt/LUKS, kTLS, IPsec/XFRM, OpenSSL, GnuTLS, NSS, or SSH. Applications explicitly configured to use the afalg engine or that directly bind aead, skcipher, or hash sockets via AF_ALG may be affected. To assess exposure prior to applying this workaround, run: lsof | grep AF_ALG
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Currently no fix is available
- No fix availableSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Common Debiansiemens_psirt
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Common Debian arm64siemens_psirt
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Platform Container Common Debian Developmentsiemens_psirt
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux VMWare Developmentsiemens_psirt
Currently no fix is available
- No fix availableSIMATIC IPC Industrial Edge Device OS (IED-OS)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Common Debiancisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Common Debian arm64cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux Platform Container Common Debian Developmentcisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC AX Runtime Core Linux VMWare Developmentcisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC IPC Industrial Edge Device OS (IED-OS)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0)cisa_csaf_ot
Currently no fix is available
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (324)
Public proof-of-concept and weaponised exploit code.
- exploit/linux/local/cve_2026_31431_copy_failCopy Fail AF_ALG + authencesn Page-Cache Writeweaponized · metasploit
- 0xBlackash/CVE-2026-31431CVE-2026-31431PoC · poc_in_github
- 0xFuffM3/CVE-2026-31431-CopyFail0xFuffM3/CVE-2026-31431-CopyFailPoC · poc_in_github
- 0xShe/CVE-2026-314310xShe/CVE-2026-31431PoC · poc_in_github
affected products (424)
Products and version ranges known to be affected.
- IBM Power Hardware Management Consoleall versionscert_bundDEcpe:/a:ibm:hardware_management_console:-
advisories (21)
Vendor and ecosystem advisories describing this.
- 7PAA024620ABB Ability Edgenius: Copy Fail2026-06-25csaf · abb_psirtCH
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system
- Kunbus-2026-0000005Copy Fail2026-05-29csaf · kunbus_psirtDE
- NCSC-2026-0131Kwetsbaarheid verholpen in Linux kernel cryptographic subsystemNL2026-05-01csaf · ncsc_nlNL
De Linux kernel heeft een kwetsbaarheid verholpen in de algif_aead crypto module binnen het cryptographic subsystem.
- NCSC-2026-0346Kwetsbaarheden verholpen in Siemens productenNL2026-09-08csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS en Siveillance.
- PPSA-2026-003Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI2026-08-04csaf · pilz_psirtDE
The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
- SA26P010Impact of Linux Kernel vulnerabilities on B&R products2026-06-11csaf · abb_psirtCH
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the affected system. Public proof-of-concept exploits are available for the vulnerabilities described herein. At the time of publication of this advisory, B&R had no evidence of active exploitation targeting B&R products.
- SSA-019113SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.62026-07-14csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1.6 only; for version V3.1.7 refer to SSA-457936.
- SSA-082556SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.52025-06-10csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.
- SSA-265688SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.12024-04-09csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 TM MFP V1.1 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V1.1 only; for version V1.1.1 refer to SSA-784472.
- SSA-328642SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products2026-09-08csaf · siemens_psirtDE
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- WID-SEC-W-2026-1232Linux Kernel: Mehrere SchwachstellenDeutsch2026-04-21csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Zustand oder andere, nicht näher spezifizierte Auswirkungen zu erzielen.
- WID-SEC-W-2026-1666IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2026-05-25csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
- WID-SEC-W-2026-2253IBM Security Verify Access: Mehrere SchwachstellenDeutsch2026-07-08csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen und andere, nicht näher bezeichnete Angriffe durchzuführen.
- WID-SEC-W-2026-2437Oracle Communications: Mehrere SchwachstellenDeutsch2026-07-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
- ICSA-24-102-01Siemens SIMATIC S7-1500 TM MFP2024-04-09icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- ICSA-25-162-05Siemens SIMATIC S7-1500 CPU family2025-06-10icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
- ICSA-26-174-06Impact of Linux Kernel vulnerabilities on B&R products2026-06-11icsa · cisa_csaf_otUS
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the affected system. Public proof-of-concept exploits are available for the vulnerabilities described herein. At the time of publication of this advisory, B&R had no evidence of active exploitation targeting B&R products.
- ICSA-26-195-02ABB Ability Edgenius2026-06-25icsa · cisa_csaf_otUS
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system
- ICSA-26-209-04Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP2026-07-14icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- ICSA-26-260-06ABB Ability Edgenius2026-06-25icsa · cisa_csaf_otUS
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system
- ICSA-26-265-04Siemens SIPLUS and SIMATIC Products2026-09-08icsa · cisa_csaf_otUS
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (136)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2026-31431cnnvd
- https://www.kernel.org/Patchcnnvd
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130cenisa_euvd
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fcenisa_euvd
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667enisa_euvd
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82enisa_euvd
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875benisa_euvd
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan