PatchSiren cyber security CVE debrief

CVE-2021-47178 Siemens CVE debrief

This CVE addresses a Linux kernel vulnerability in the SCSI target core subsystem where `smp_processor_id()` was incorrectly called in preemptible code context. The vulnerability was resolved by avoiding this unsafe pattern. Siemens TIM 1531 IRC industrial communication devices are affected due to their embedded Linux kernel usage. The issue has a local attack vector requiring low privileges and can lead to high availability impact (denial of service). A vendor fix is available requiring update to version 2.4.8 or later.

Vendor: Siemens
Product: SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
CVSS: HIGH 7.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2024-03-25
Original CVE updated: 2026-08-04
Advisory published: 2024-03-25
Advisory updated: 2026-08-04

Who should care

Organizations operating Siemens TIM 1531 IRC (6AG1543-1MX00-7XE0) or TIM 1531 IRC (6GK7543-1MX00-0XE0) industrial communication devices in OT/ICS environments. System administrators responsible for firmware lifecycle management in industrial control systems. Security teams monitoring Linux kernel vulnerabilities affecting embedded industrial devices.

Technical summary

CVE-2021-47178 is a Linux kernel vulnerability in the SCSI target core subsystem where `smp_processor_id()` was invoked in preemptible code, violating kernel preemption safety rules. This can trigger kernel warnings or crashes under specific scheduling conditions, resulting in denial of service. The vulnerability affects Siemens TIM 1531 IRC industrial communication modules which utilize embedded Linux. The CVSS 3.1 score of 5.5 (MEDIUM) reflects local attack vector, low attack complexity, low privileges required, and high availability impact with no confidentiality or integrity impact. Siemens has released firmware version 2.4.8 to address this issue.

Defensive priority

medium

Recommended defensive actions

Apply vendor firmware update to version 2.4.8 or later for affected Siemens TIM 1531 IRC devices
Review and implement CISA ICS recommended practices for defense-in-depth strategies
Monitor Siemens ProductCERT advisories for additional security updates
Assess network segmentation for affected industrial control systems to limit local attack surface
Verify kernel configurations on embedded Linux systems for similar preemptibility issues

Evidence notes

The vulnerability description indicates a kernel-level fix for improper use of `smp_processor_id()` in preemptible contexts within the SCSI target core. CISA CSAF advisory ICSA-24-165-06 confirms Siemens TIM 1531 IRC products are affected. CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H indicates local attack, low privileges required, no user interaction, with availability impact only. Siemens remediation guidance specifies firmware update to V2.4.8 or later.

Sources and references

Verified primary and authoritative sources

CVE-2021-47178 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2021-47178

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2021-47178 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-47178

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-165-06.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/csaf/ssa-337522.json

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/html/ssa-337522.html

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/pdf/ssa-337522.pdf

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/txt/ssa-337522.txt

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-06

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.