SIMATIC S7 PLC Spare Parts Guide: CPUs, Modules and What to Order

Every machine on the floor runs because a PLC tells it to. When that PLC stops, nothing moves. The conveyors freeze, the robots park mid-cycle, and the operator is already walking toward your office. On thousands of production lines across Europe, that PLC is a Siemens SIMATIC S7. It has been the backbone of factory automation for over two decades, and it is still the standard. The problem for maintenance teams is that many of these controllers are now old enough that Siemens has moved on, but the machines they run are nowhere near retirement.

This guide is for the person who needs to source a SIMATIC S7 CPU, I/O module, power supply or programming software without waiting eight weeks and without ordering the wrong MLFB. It covers the main families still running in the field, what tends to fail first, and where a tested used unit makes more sense than a new one. For general rules on sourcing industrial stock, start with our buyer's guide to used industrial parts.

What the SIMATIC S7 family actually covers

SIMATIC S7 is not one product. It is a family of controllers that spans everything from compact brick PLCs to multi-rack systems running hundreds of I/O points. Knowing which generation you have determines what to look for and what to avoid.

What matters for procurement is that S7-300 and S7-400 parts are still everywhere in the field but no longer freely available from Siemens for every variant. That gap is where tested used stock becomes the practical answer. If the machine runs well and the only thing dead is a CPU or a power supply, you do not need a migration project. You need the same module.

S7-400 CPUs and power supplies: the expensive ones that hurt when they die

S7-400 is the heavy-duty end of the family. These controllers run process plants, automotive assembly lines and large material handling systems where downtime is measured in thousands of euros per hour. The CPU units, such as the 414, 416 and 417 series, are multi-slot rack-based controllers with redundant power supply options and the ability to handle tens of thousands of I/O points.

When an S7-400 CPU fails, it is rarely subtle. The RUN led goes out, the STOP led may flash or stay solid, and the entire rack is dark to the connected I/O. Common failure modes include power supply capacitor ageing, backplane connector damage from vibration, and flash memory corruption after years of write cycles. On sites with poor mains quality, the power supply module is often the real root cause, not the CPU. Always check the 24V rail and the power supply module before you condemn a CPU. A healthy rack with a dead PS 407 is a one-hour fix, not a controller swap.

We keep tested S7-400 hardware in stock, including CPUs like the 6ES7414-4HM14-0AB0 and rack-mount PLC units such as the 6ES7417-4HL01-0AB0. Special function modules are harder to find and worth keeping a spare of. A good example is the FM 450-1 counter module 6ES7 450-1AP01-0AE0, which handles high-speed counting tasks that a standard digital input cannot.

S7-300 and ET200S: the workhorses with the biggest installed base

If S7-400 is the heavy lifter, S7-300 is the one you see in every other cabinet. Hundreds of thousands of these racks are still running, and the spare parts pipeline splits roughly into three categories: CPUs, signal modules and interface modules for distributed I/O.

The ET200S family deserves special attention because it is often overlooked until a station goes dark. An ET200S interface module bridges the PROFIBUS or PROFINET network back to the main controller. When the interface module fails, the main PLC sees the entire station drop out, even though every I/O card behind it is still healthy. The module itself is relatively inexpensive compared to the downtime it causes. We stock units like the 6ES7134-4FB01-0AB0 ET200S module, and we recommend keeping at least one spare interface module per station type on the shelf.

For newer or smaller installations, the S7-1200 series has taken over many of the roles that S7-300 used to fill. Compact CPUs like the 6ES7511-1AK01-0AB0 run standalone machines, small process cells and test rigs. They are still active products from Siemens, but a tested used unit cuts the cost and lead time for a backup controller or a development rack.

STEP 7 software: the spare part nobody budgets for

A common frustration in older plants is this: the hardware is fine, the backup CPU is on the shelf, but nobody can find the STEP 7 licence. The original engineering laptop died three years ago, the licence was tied to a floating key that nobody documented, and now a minor program change means buying a new software package that costs as much as the hardware.

STEP 7 versions are not all interchangeable with every CPU. Classic STEP 7 V5.x covers S7-300 and S7-400. TIA Portal covers S7-1200, S7-1500 and newer S7-300/400 firmware. An older CPU running on a legacy firmware release may not be reachable from a modern TIA Portal version without a firmware upgrade, and upgrading firmware on a running machine is not a Friday afternoon job. Before you buy software, confirm which engineering package the machine was originally commissioned with and which version the program archive expects. We carry both STEP 7 Professional V14 6ES7810-4CC04-0YX4 and STEP 7 V5.3 upgrade licences 6ES7810-4CC07-0YE5, and the rule is the same as with the hardware: read the exact version off your existing installation before you order a replacement.

How to read a Siemens SIMATIC MLFB so you stop ordering the almost-right part

Siemens MLFBs are not random strings. They break down into blocks that tell you the product class, the function, the interface type and the version. A typical S7 CPU number such as 6ES7 414-4HM14-0AB0 splits like this:

• 6ES7 says SIMATIC S7 automation system. This is the prefix that separates PLC hardware from drives, CNC controls or networking gear.
• 414 is the CPU class. 41x is S7-400. 31x is S7-300. 21x can be S7-200 or S7-1200, so look at the whole string.
• The groups after the hyphens define memory size, interfaces (MPI, DP, PN), firmware level and hardware revision.
• The last block often contains version letters that a supplier needs to confirm. Two CPUs with the same main number but different version blocks can behave differently with the same program.

Rules that prevent return shipments:

1. Photograph the label on the failed module before you disconnect anything.
2. Write down the full string including version letters, not just the first block.
3. Check the hardware configuration in the STEP 7 or TIA Portal project to confirm the exact MLFB that was commissioned.
4. Ask the supplier to confirm fit against that complete string. A "similar S7-400 CPU" is not the same as a drop-in replacement.

For the broader Siemens numbering system, our Siemens part number decoder guide covers drives, CNCs and HMIs as well. Official manuals and firmware compatibility charts are on Siemens Industry Online Support.

Repair, new OEM, or tested used?

The right answer depends on your downtime cost, not on a generic preference.

For S7-400 CPUs and S7-300 modules that Siemens has already discontinued or placed on limited availability, tested used stock is often the only path that keeps a machine in production without a full controls migration. The same logic applies across the broader PLC landscape, which is why we maintain a dedicated PLCs and CPUs collection alongside the main Siemens collection.

A practical swap procedure

If the PLC has stopped and you have the replacement module in hand, do not rush the swap. A few minutes of preparation prevents a second call-out.

1. Document every LED state on the failed rack before cutting power. A flashing STOP with a specific pattern is diagnostic information you lose the moment the breaker is opened.
2. Photograph every connector, every module position and every label. Rack slot order matters on S7-400.
3. If possible, upload the program from the failed CPU before powering down. If the CPU is completely dead this is not an option, but if it is in STOP you may still be able to reach it.
4. Power down the rack and wait for all LEDs to extinguish. Check that 24V is actually gone at the terminals.
5. Swap the module. Check grounding, seating on the backplane and connector orientation. A bent backplane pin on an S7-400 rack is a hidden problem that will cause intermittent faults for weeks.
6. Power up and watch the startup sequence. The CPU should go through STOP, memory reset if needed, then RUN after program download.
7. Download the program from the archive and perform a cold restart or warm restart as the machine requires. Test in manual mode before returning to automatic cycle.
8. Check that all distributed I/O stations come back online. An ET200S station that stays dark after a CPU swap usually points to a bus configuration mismatch, not a hardware fault.

If the spare is a different firmware version than the original, expect a configuration mismatch warning in the engineering software. This is usually resolvable with a hardware configuration update. It is not a reason to abort the swap unless the firmware gap is more than two major revisions.

Related reading on Samonde

• How to choose used industrial spare parts: a buyer's guide
• Understanding Siemens part numbers: complete decoder guide
• Refurbished vs new industrial parts: making the right choice
• SINUMERIK 840D spare parts guide: NCU, PCU, OP panels
• Modicon Quantum and Premium spare parts guide: CPUs, I/O
• Why used Siemens HMI panels are the smart choice for factory budgets

SIMATIC S7 controllers have been the standard for a reason. They are well documented, the parts market is deep, and a known-good spare turns a controller failure from a crisis into a half-day swap. The whole game is the same as with any legacy automation: know your MLFB, keep one tested spare of the parts that stop production, and work with a supplier who tests what they sell.