New functions with firmware V3.1.4 for all S7-1500 and ET 200 CPUs
Update V3.1.4 for 6ES751x-xxx03-0AB0 and CPU1516T(F), CPU1517 and CPU1518 (except MFP)
Dependencies with regard to STEP 7, STEP 7 Safety Advanced and upwards compatibility:
Totally Integrated Automation Portal with STEP 7 Professional V19 or higher is required to configure this CPU firmware version.
Configurations with earlier TIA Portal STEP 7 Professional versions are compatible with later releases.
The handling is described detailed in entry 109744163
New functions with firmware V3.1.4 for all S7-1500 and ET 200 CPUs:
- TransferSubscription:
The OPC UA specification stipulates that OPC UA clients can transfer a subscription with its monitored items from one session to another (see OPC 10000-4: UA Part 4: Services).
The OPC UA server of an S7-1500 CPU supports the transfer of subscriptions as of firmware version V3.1.4.
A configuration for the S7-1500 OPC UA server is not required. The "TransferSubscription" service is provided on request from an OPC UA client.
Enhanced user experience:
The following behavior has been improved:
- An improved cycle time has been achieved when blocks containing functions such as GetSymbolPath or GetSymbolName are overloaded.
- Block monitoring of STL instructions has been improved.
- Block monitoring of STRING REPLACE instructions has been improved.
The following behavior has been corrected:
- An MC_MoveRelative always overrides an MC_GearInVelocity.
- If there is another redundant SyncMaster in the SyncDomain for a SyncMaster, the coupled IO systems are synchronized again after the SyncMaster is restarted.
- The absolute value position of a technology object with absolute encoder on an optional drive is no longer lost, even after RUN -> STOP -> RUN and another call of the ReconfigIOSystem function.
- At power on in the "Multiple use IO system" PROFINET configuration together with isochronous mode, the following error message no longer occurs sporadically:
- Temporary CPU error: Serious firmware exception error (internal system code: 16#00090000 16#10020000 16#00000000) CPU changes to DEFECTIVE mode
- It is no longer possible to subscribe via a user-defined server interface to value changes of a tag that is not designated as "Accessible from HMI/OPC UA/Web API" in the DB.
- When individual bits inside of more complex data types (e.g. Integer.%X4) than Boolean are monitored, the value shown can deviate from the actual value.
- A problem where associated values in motion alarms or program alarms were not resolved correctly and were therefore not shown in the web server has been corrected.
- A problem where resources required for connection establishment were sporadically not released in load situations has been corrected. This sometimes had the result that the PLC could no longer be reached.
Resolved security vulnerabilities:
- Vulnerability of unbounded memory growth due to session processing in TLSv1.3 in OpenSSL.
The SIMATIC S7-1500 CPUs are affected by the vulnerability of unbounded memory growth due to session processing in TLSv1.3 in OpenSSL (CVE-2024-2511). This vulnerability was announced on 8 April 2024 under https://openssl-library.org/news/secadv/20240408.txt
The security vulnerability was resolved for CPUs in the SIMATIC S7-1500 product family with firmware V3.1.4.