Detections
Analytics
Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution (CVE-2024-28956)
medium Tenable OT Security Plugin ID 505617
Synopsis
The remote OT asset is affected by a vulnerability.Description
This plugin only works with Tenable.ot.Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://www.cisa.gov/news-events/ics-advisories/ICSA-26-209-04
Plugin Details
Severity: Medium
ID: 505617
File Name: tenable_ot_siemens_CVE-2024-28956.nasl
Version: 1.3
Type: Remote
Family: Tenable.ot
Published: 7/27/2026
Updated: 7/30/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 6
Percentile: 96.73
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 4.9
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 5.7
Threat Score: 1.9
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/o:siemens:simatic_s7-1500_cpu_firmware:3.1.6, cpe:/o:siemens:siplus_s7-1500_cpu_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 7/14/2026
Vulnerability Publication Date: 5/13/2025
Reference Information
CVE: CVE-2024-28956
CWE: 1421
ICSA: 26-209-04