SSA-328642

Siemens Security Advisory by Siemens ProductCERT

SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products

Publication Date:	2026-09-08
Last Update:	2026-09-08
Current Version:	V1.0
CVSS v3.1 Base Score:	7.8

SUMMARY

Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

KNOWN AFFECTED PRODUCTS

Un-/Collapse All

Affected Product and Versions	Remediation
SIMATIC AX Runtime	Show more details
SIMATIC AX Runtime Core Linux Common Debian All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC AX Runtime Core Linux Common Debian arm64 All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC AX Runtime Core Linux Platform Container Common Debian Development All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC AX Runtime Core Linux VMWare Development All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC CN 4100 All versions < V6.0 affected by CVE-2026-31431	Update to V6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814144/ See further recommendations from section Mitigations
SIMATIC HMI Operator Device	Show more details
SIMATIC Advanced HMI Panel	Show more details
SIMATIC HMI Unified Comfort Panels family	Show more details
SIMATIC HMI Unified Comfort Panel PRO family	Show more details
SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI Unified Comfort Panels Hygienic family	Show more details
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI Unified Comfort Panels Standard family	Show more details
SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIPLUS HMI Unified Comfort Panels Standard family	Show more details
SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825605/ See further recommendations from section Mitigations
SIMATIC HMI Unified Basic Panels	Show more details
SIMATIC HMI Unified Basic Panels Standard family	Show more details
SIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIPLUS HMI Unified Basic Panels family	Show more details
SIPLUS HMI MTP400 Unified Basic (6AG1123-3DB32-2AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIPLUS HMI MTP700 Unified Basic (6AG1123-3GB32-2AW0) All versions < V21 SP2 Update 1 affected by CVE-2026-31431	Update to V21 SP2 Update 1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIPLUS HMI MTP1000 Unified Basic (6AG1123-3KB32-2AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIPLUS HMI MTP1200 Unified Basic (6AG1123-3MB32-2AW0) All versions < V21 Update 2 SR1 affected by CVE-2026-31431	Update to V21 Update 2 SR1 or later version https://support.industry.siemens.com/cs/ww/en/view/109825897/ See further recommendations from section Mitigations
SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC IPC Industrial Edge Device OS (IED-OS) All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations
SIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0) All versions affected by CVE-2026-31431	Currently no fix is available See further recommendations from section Mitigations

MITIGATIONS

Siemens has identified the following specific mitigations that customers can apply to reduce the risk:

Only build and run applications from trusted sources.
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only.

Product-specific remediations or mitigations can be found in the section Known Affected Products.
Please follow the General Security Recommendations.

GENERAL SECURITY RECOMMENDATIONS

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION

Industrial Edge represents an open, ready-to-use Edge computing platform consisting of Edge devices, Edge apps, Edge connectivity, and an application and device management infrastructure.

SIMATIC HMI Panels are used for operator control and monitoring of machines and plants.

SIMATIC IPC Industrial Edge devices are industrial PCs that are pre-configured with the Industrial Edge Device software.

SIMATIC S7-1500 TM MFP is a Technology module Multi functional platform for SIMATIC S7-1500 PLCs based on SIMATIC Industrial OS

SIPLUS HMI MTP1000, Unified Basic Panel, based on 6AV2123-3KB32-0AW0 with conformal coating -20 ...+50 °C touch operation 10" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray

SIPLUS HMI MTP1200, Unified Basic Panel, based on 6AV2123-3MB32-0AW0 with conformal coating -20 ...+50 °C touch operation 12" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray

SIPLUS HMI MTP400, Unified Basic Panel, based on 6AV2123-3DB32-0AW0 with conformal coating -20 ...+50 °C touch operation 4" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray

SIPLUS HMI MTP700, Unified Basic Panel, based on 6AV2123-3GB32-0AW0 with conformal coating -20 ...+50 °C touch operation 7" widescreen TFT display, 16 million colors, PROFINET interface, configurable as of WinCC Unified Basic V18 Update 3, contains open-source software, which is provided free of charge see enclosed Blu-ray

The devices of the SIMATIC IOT family offer a robust, compact and flexible solution with a focus on the IOT environment and round off the SIMATIC IPC product range in the lower output range.

The SIMATIC CN 4100 is a communication node that allows connecting third-party systems helping to implement system concepts for process control technology.

VULNERABILITY DESCRIPTION

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Vulnerability CVE-2026-31431

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

CVSS v3.1 Base Score	7.8
CVSS v3.1 Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE	CWE-669: Incorrect Resource Transfer Between Spheres

ADDITIONAL INFORMATION

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

HISTORY DATA

V1.0 (2026-09-08):

Publication Date

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.