Siemens SIMATIC S7-1500 TM MFP Linux subsystem has unfixed flaws
Original title: Siemens SIMATIC S7-1500 TM MFP
All GNU/Linux subsystem versions on the TM MFP V1.1.1 are affected, and Siemens says no fix is available yet.
CISA republished a Siemens advisory covering many vulnerabilities in the additional GNU/Linux subsystem of SIMATIC S7-1500 TM MFP V1.1.1. Every subsystem version is listed as affected, including Linux kernel issues such as CVE-2023-52927, scored 7.8. Siemens is preparing fixes. Until then it advises limiting the interactive shell to trusted personnel and running only trusted applications.
Unconfirmed: The excerpt truncates the CVE list, and exploitation status is not stated.
- The advisory lists 377 vulnerability classes and a CVSS figure of 10.
- CVE-2023-52927 is a local issue scored CVSS 7.8 HIGH.
- Product status is known_affected and no fix is currently available.
- Deployed worldwide across several critical-infrastructure sectors; Siemens is based in Germany.
Impact: Local high-impact flaws in the Linux subsystem
| Product | Affected |
|---|---|
| Siemens SIMATIC S7-1500 TM MFP GNU/Linux subsystem | all versions (V1.1.1) |
- 1.Limit interactive-shell access on the GNU/Linux subsystem to trusted personnel.
- 2.Build and run applications only from trusted sources.
- CVEs
- CVE-2023-52927CVE-2023-53292CVE-2023-54271CVE-2024-26982CVE-2024-36922CVE-2024-40945CVE-2024-47809CVE-2024-49998CVE-2024-53166CVE-2024-56647CVE-2024-56657CVE-2024-56719CVE-2024-57977CVE-2024-57979CVE-2024-57980CVE-2024-57981CVE-2024-57986CVE-2024-57993CVE-2024-57996CVE-2024-58002CVE-2024-58005CVE-2024-58009CVE-2024-58013CVE-2024-58014CVE-2024-58017CVE-2024-58020CVE-2024-58058CVE-2024-58061CVE-2024-58063CVE-2024-58068
- Vendors
- Siemens
- Products
- SIMATIC S7-1500 TM MFP
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-52927 | Linux kernel: netfilter: allow exp not to be removed in nf_ct_find_expectation | 7.8 | <1% | PoC | |
| CVE-2023-53292 | Linux kernel: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none | 5.5 | <1% | ||
| CVE-2023-54271 | Linux kernel: blk-cgroup | — | <1% | ||
| CVE-2024-26982 | Linux kernel: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of bounds… | 7.1 | <1% | ||
| CVE-2024-36922 | Linux kernel: wifi: iwlwifi: read txq->read_ptr under lock | 5.5 | <1% | ||
| CVE-2024-40945 | Linux kernel: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should return either a sva bond… | 5.5 | <1% | ||
| CVE-2024-47809 | Linux kernel: dlm: fix possible lkb_resource null dereference | 5.5 | <1% | ||
| CVE-2024-49998 | Linux kernel: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the lan9303… | 4.7 | <1% | ||
CVE-2024-53166+2 related CVEs | Linux kernel: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove freed bfqq from bic are… | 7.8 group max | <1% | ||
| CVE-2024-56719 | Linux kernel: net: stmmac: fix TSO DMA API usage causing oops | 5.5 | <1% | ||
| CVE-2024-57980 | Linux kernel: media: uvcvideo | 7.8 group max | <1% | ||
CVE-2024-58058+3 related CVEs | Linux kernel: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make… | 5.5 | <1% |
From the original article
6 min read at cisa.govView CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1. 1. 1.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.