Feature Enhancements

Feature Enhancements:

CloudConnect Support: MQTT Client
The S7-1200 Communication Modules now provide a fully configurable MQTT Client functionality, eliminating the need for additional programming. You can create datapoints based on existing PLC tags and customize MQTT Topics and trigger conditions for publishing. The integrated Payload Editor in TIA Portal allows you to tailor the data structure in JSON format to meet specific application requirements.

Security for DNP3 & IEC 60870-5-104 based Applications
To ensure data and connection security for industrial remote communication applications, all connections to SCADA systems (DNP3 or IEC 60870) can be based on TLS (Transport Layer Security). Additionally, Secure Authentication for IEC 60870 ensures that only verified stations have connection access to SCADA systems.

Reconnection on Demand & Periodically for cellulcar CPs (CP1243-7, CP1242-7)
For cellular-based network connections, automatic reconnect can be configured for devices. This feature is particularly useful for overcoming sporadic hiccups in the cellular network, thereby avoiding the need for manual resets in geographically widely distributed automation systems.

Configurable Time Zone and adjusted Time Synchronization
In automation systems, having a reliable time value is essential for most applications. To ensure accurate timestamps for data values - even when dealing with different time zones or daylight-saving time changes - the time zone can now be individually configured in the modules. In situations where synchronization methods are unavailable (such as during system startup), the internal PLC time can serve as a valid time reference.

Security Updates
VPN (Virtual Private Network) connections now utilize the latest IKEv2 (Internet Key Exchange Version 2) protocol, incorporating state-of-the-art security mechanisms. Furthermore, device certificates can be based on ECC (Elliptic Curve Cryptography), ensuring robust authentication and encryption.

Interoperability with 3rd party Devices and Scada Systems in IRC Applications
In Industrial Remote Communication (IRC) applications, standard protocols like DNP3 and IEC 60870 provide a foundation for ensuring interoperability among devices and applications. However, variations in interpretation and implementation of specific parts can be challenging for end users. To enhance integration of the S-1200 system, we’ve made following detailed and flexible adjustments to further enhance interoperability with 3rd party devices:

• Manual Query with PLC Trigger for DNP3 & IEC 60870-5-104 & ST7
• Feedback Status Validation for DNP3 & IEC 60870-5-104
• Configurable RTU Maximum Fragment Size
• Manipulation of Datapoint Quality Descriptors for DNP3 & IEC 60870-5-104 & ST7

Additional Diagnosis for Datapoints and Connections in TCSB applications
The Communication Modules for S7-1200 offer additional diagnosis information to help you keep track of data volume and connection history (Telecontrol Server Connections). This valuable feature allows you to monitor the data sent and connection history for the station. This information is easily accessible through the Webserver of the devices.

Bugfixes:

• Fixed a Kernel oops leading to “Removal of Hardware” reaction in PLC
• Fixed a NULL Pointer problem leading to “Removal of Hardware” reaction in PLC
• Cyclic Reconnect to Cellular Network optimized
• Fixed an issue with peer2peer communication between mobile CP in TCSB applications.
• Fixed a problem with incorrect values if the threshold and timer are used in parallel

Security fixes:

• OpenSSL Vulnerability in Siemens Industrial Products
• CVE-2022-0778 ( S-PCERT#6565 )
• OpenSSL 1.1.1, 3.0
• End of Life Notification (EOL)
• Siemens miniweb 8.0.0 Remote Denial of Service Vulnerability – 0029
• cURL, libcurl 7.7 ≤ 8.0.1
• Multiple Vulnerabilities - 8.1.0, CVE-2023-28322, CVE-2023-28319, CVE-2023-28320, CVE-2023-28321
• libxml2 ≤ 2.10.3
• Multiple Remote Denial of Service Vulnerabilities - 2.10.4, CVE-2023-29469, CVE-2023-28484
• Siemens miniweb 6.1.x Multiple Remote Denial of Service Vulnerabilities – 0028, CVE-2023-28827, CVE-2023-30756, CVE-2023-30755
• OpenSSL 3.x ≤ 3.0.8
• Remote Denial of Service Vulnerabilbity - 3.0.9, CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255, CVE-2023-2650