Siemens SIMATIC S7-1500 TM MFP Linux subsystem has unfixed flaws
All GNU/Linux subsystem versions on the TM MFP V1.1.1 are affected, and Siemens says no fix is available yet.
Stories per day · 30 days
2 RSS
Relatedics5siemens5plc3access-control1cisa1hmi1industrial-edge1linux1openssh1s71s7-15001web-server1webserver1
5 stories, newest first · one card per story
Stories tagged #simatic
Siemens SIMATIC S7 Webserver API vulnerabilities
NET Client Library for SIMATIC S7 Webserver API versions before 3.3.61 and 3.3.62 vulnerable to path traversal and sensitive information exposure; update to 3.3.61 or later.
SIMATIC S7-1500 web server flaws can hijack authorized browser sessions
All listed firmware versions are affected, Siemens is still preparing fixes, and eight CVEs are named.
Siemens Industrial Edge devices leak internal APIs to logged-in users
Some devices have versioned fixes, while listed SIMATIC HMI panels currently have no fix.
1
Siemens SIPLUS and SIMATIC Products
CISA lists many Siemens SIPLUS and SIMATIC products in an advisory tied to a Linux kernel crypto issue.