Regular Firmware Updates; Notifications About Security Vulnerabilities (Siemens Security Advisories) - Siemens SIMATIC S7-1500 System Manual

Industrial cybersecurity
4.7 Secure operation of the system
4.7.5

Regular firmware updates

Note
Outdated firmware versions might not be monitored for security vulnerabilities.
• Always keep your plant/products up to date to benefit from troubleshooting and to
minimize potential risks.
• Use email notifications to be automatically informed about firmware updates.
There are two ways of being automatically informed about firmware updates:
• Use "Enable notification" and "Add to mySupport favorites" functions, see section Security
update notification (Page 36) .
• Consult the firmware collection on SIOS. To do this, register in the download section on
mySiePortal (https://sieportal.siemens.com/en-ww/home).
Also read the basic cybersecurity information in the Cybersecurity notes section.
For more information, see also the Firmware update (Page 461) section.
4.7.6

Notifications about security vulnerabilities (Siemens Security Advisories)

A vulnerability is a security vulnerability in information security. It can pose a threat as it
provides intruders with the opportunity to access system resources and manipulate or steal
data.
Siemens ProductCERT
If Siemens identifies or fixes security gaps (Vulnerabilities) in the products, this will be
published in the Security Advisories.
You can find the documents for SIMATIC on the following Siemens AG Web page: Siemens
ProductCERT and Siemens CERT
(https://new.siemens.com/global/en/products/services/cert.html?s=SIMATIC#SecurityPublicati
ons)
Enter "SIMATIC" in the search box "Search Security Advisories".
On this page, you will also find all the required information on how to deal with
vulnerabilities:
• Contact persons for matters related to vulnerabilities
• Options for automated notifications regarding vulnerabilities
• Notifications are also possible in CSAF format
• Option to subscribe to RSS feeds and newsletters
44
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF