Siemens SIPLUS and SIMATIC Products

CVE-2026-31431

September 22, 2026 · CISA (US-CERT) · Severity: HIGH

This advisory covers the 'Copy Fail' vulnerability affecting numerous Siemens SIPLUS and SIMATIC products. Siemens has released fixes for some products and is preparing further updates, recommending countermeasures for those without patches. The vulnerability poses a risk to industrial control systems across multiple sectors. 📌 **Analyst Note:** The wide scope of affected products makes this vulnerability particularly challenging for asset owners to remediate. Organizations should inventory their Siemens devices, apply available patches, and implement the recommended countermeasures to mitigate risk until full fixes are released.

Key Takeaways

Multiple Siemens SIPLUS and SIMATIC products are affected by the 'Copy Fail' vulnerability, which could allow an attacker to compromise system integrity across a wide range of industrial control devices.
Siemens has released new versions for several affected products and recommends updating to the latest versions, while also providing specific countermeasures for products where fixes are not yet available.
The vulnerability impacts a broad array of products including SIMATIC AX Runtime, HMI panels, and industrial PCs, underscoring the need for comprehensive patch management in industrial environments.