Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisoryKnown exploitedSeverity 10.0 criticalExploit likelihood 38%

Siemens SIMATIC S7-1500 TM MFP

ICSA-26-295-16 · CISA · October 13, 2026

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

From CISA, quoted as published. Check the source before acting.

What to do

Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. Only build and run applications from trusted sources. Currently no fix is available

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2023-529277.8 highNo0.3%Improper Input Validation (CWE-20)
CVE-2023-532925.5 mediumNo0.1%NULL Pointer Dereference (CWE-476)
CVE-2023-542710.0 noneNo0.2%Improper Input Validation (CWE-20)
CVE-2024-269827.1 highNo0.3%Out-of-bounds Read (CWE-125)
CVE-2024-369228.8 highNo0.3%Improper Input Validation (CWE-20)
CVE-2024-409456.8 mediumNo0.3%Return of Wrong Status Code (CWE-393)
CVE-2024-478095.5 mediumNo0.2%NULL Pointer Dereference (CWE-476)
CVE-2024-499984.7 mediumNo0.2%NULL Pointer Dereference (CWE-476)
CVE-2024-531667.8 highNo0.3%Use After Free (CWE-416)
CVE-2024-566475.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-566575.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-5671910.0 criticalNo0.5%Improper Input Validation (CWE-20)
CVE-2024-579775.5 mediumNo0.2%Improper Locking (CWE-667)
CVE-2024-579797.8 highNo0.3%Use After Free (CWE-416)
CVE-2024-579804.7 mediumNo0.3%Double Free (CWE-415)
CVE-2024-579815.5 mediumNo0.3%NULL Pointer Dereference (CWE-476)
CVE-2024-579867.1 highNo0.3%Improper Input Validation (CWE-20)
CVE-2024-579935.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-579967.8 highNo0.3%Improper Validation of Array Index (CWE-129)
CVE-2024-580027.8 highNo0.3%Use After Free (CWE-416)
CVE-2024-580055.5 mediumNo0.3%Improper Control of Resource Identifiers (CWE-99)
CVE-2024-580095.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-580137.8 highNo0.2%Use After Free (CWE-416)
CVE-2024-580146.0 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-580175.5 mediumNo0.3%Integer Overflow or Wraparound (CWE-190)
CVE-2024-580205.5 mediumNo0.3%NULL Pointer Dereference (CWE-476)
CVE-2024-580585.5 mediumNo0.2%NULL Pointer Dereference (CWE-476)
CVE-2024-580615.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-580635.5 mediumNo0.2%Missing Release of Memory after Effective Lifetime (CWE-401)
CVE-2024-580685.5 mediumNo0.2%NULL Pointer Dereference (CWE-476)
CVE-2024-580715.5 mediumNo0.2%Improper Locking (CWE-667)
CVE-2024-580726.4 mediumNo0.2%Use After Free (CWE-416)
CVE-2024-580775.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2024-580797.8 highNo0.2%Improper Input Validation (CWE-20)
CVE-2024-580837.8 highNo0.2%Use After Free (CWE-416)
CVE-2025-216827.3 highNo0.2%NULL Pointer Dereference (CWE-476)
CVE-2025-217007.8 highNo0.2%Use After Free (CWE-416)
CVE-2025-217027.8 highNo0.3%Improper Input Validation (CWE-20)
CVE-2025-217037.8 highNo0.3%Use After Free (CWE-416)
CVE-2025-217044.4 mediumNo0.4%Improper Handling of Length Parameter Inconsistency (CWE-130)
CVE-2025-217055.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217065.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217079.8 criticalNo0.5%Use of Uninitialized Resource (CWE-908)
CVE-2025-217085.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217165.5 mediumNo0.2%Use of Uninitialized Resource (CWE-908)
CVE-2025-217197.1 highNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217245.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217257.5 highNo0.4%Improper Input Validation (CWE-20)
CVE-2025-217267.8 highNo0.2%Use After Free (CWE-416)
CVE-2025-217277.8 highNo0.2%Use After Free (CWE-416)
CVE-2025-217285.5 mediumNo0.2%Improper Input Validation (CWE-20)
CVE-2025-217317.8 highNo0.2%Use After Free (CWE-416)
CVE-2025-217358.8 highNo0.4%Out-of-bounds Write (CWE-787)
CVE-2025-217387.8 highNo0.2%Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
CVE-2025-217445.5 mediumNo0.3%NULL Pointer Dereference (CWE-476)
CVE-2025-217455.5 mediumNo0.3%Missing Release of Memory after Effective Lifetime (CWE-401)
CVE-2025-217537.8 highNo0.3%Use After Free (CWE-416)
CVE-2025-217567.8 highNo0.9%Use After Free (CWE-416)
CVE-2025-217587.8 highNo16.9%Improper Input Validation (CWE-20)
CVE-2025-217608.1 highNo38.0%Use After Free (CWE-416)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days). 317 more CVEs in the source.

Affected products

VendorProductAffected versionsFixed
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystemvers:all/*—

Why it's on these mode pages

  • Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)

Change history

  1. October 13, 2026: Publication Date
  2. October 22, 2026: Initial CISA Republication of Siemens ProductCERT SSA-784472 advisory
  3. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com