TENABLE BLOG
Frequently asked questions about the active threat to Siemens S7 Series PLCs
HIGH ICS OT-Security Siemens S7 PLC
Strategic summary
Unattributed threat actors are using AI-generated exploits to target known weaknesses in Siemens S7 controllers and potentially pre-position for disruptive attacks against critical infrastructure.
Relevance for you
The joint U.S. agency advisory describes for the first time the use of AI-generated exploitation scripts based on snap7.dll against exposed Siemens S7 PLCs , without attribution, but as a distinct attack pattern alongside the earlier CISA advisory.
Risk score
17
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.21
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 25.00
- vendor mismatch penalty
- 0.00
- consensus penalty
- -3.00
Path: operational
Consensus check
The pipeline self-checks before delivery. These rules lowered the score:
-
TTP_SKIPPEDTTP mapping skipped (placeholder or aggregation article) −3
- Consensus penalty:
- −3.0
- Total penalty:
- −3.0