Regular Firmware Updates; Notifications About Security Vulnerabilities (Siemens Security Advisories) - Siemens SIMATIC S7-1500 System Manual

4.7.5

Regular firmware updates

Note
Outdated firmware versions might not be monitored for security vulnerabilities.
• Always keep your system/products up to date to benefit from bug fixes and to minimize
potential risks.
• Use email notifications to be automatically informed about firmware updates.
There are two ways of being automatically informed about firmware updates:
• Use "Enable notification" and "Add to mySupport favorites" functions, see the section
Notification of security updates (Page 25) .
• Consult the firmware collection on SIOS. To do this, register in the download section on
mySiePortal (https://sieportal.siemens.com/en-ww/home).
Observe also the basic cybersecurity information in the section Cybersecurity information
(Page 24).
For more information, see also the section SIMATIC Drive Controller firmware update
(Page 319).
4.7.6

Notifications about security vulnerabilities (SIEMENS Security Advisories)

A vulnerability is a security vulnerability in information security. It can pose a threat as it
provides intruders with the opportunity to access system resources and manipulate or steal
data.
SIEMENS ProductCERT
When Siemens identifies Vulnerabilities in their products, this is published in Security
Advisories.
You can find the documents for SIMATIC on the following Siemens AG Web page: Siemens
ProductCERT and Siemens CERT
(https://new.siemens.com/global/en/products/services/cert.html?s=SIMATIC#SecurityPublicati
ons)
Enter "SIMATIC" in the search box "Search Security Advisories".
On this page, you will also find all necessary information on handling vulnerabilities:
• Contact persons for matters related to vulnerabilities
• Options for automated notifications regarding vulnerabilities
• Notifications are also possible in CSAF format
• Option to subscribe to RSS feeds and newsletters
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD
Industrial cybersecurity
4.7 Secure operation of the system
33