Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-8058US | — | — | ||
The regcomp function in the GNU C library version from 2.4 to 2.41 is
subject to a double free if some previous allocation fails. It can be
accomplished either by a malloc failur… | ||||
| CVE-2025-21826US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject mismatching sum of field_len with set key length
The field length description pro… | ||||
| CVE-2025-21806US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: let net.core.dev_weight always be non-zero
The following problem was encountered during stability test:… | ||||
| CVE-2025-21776US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
USB: hub: Ignore non-compliant devices with too many configs or interfaces
Robert Morris created a test progra… | ||||
| CVE-2025-21762US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
arp: use RCU protection in arp_xmit()
arp_xmit() can be called without RTNL or RCU protection.
Use RCU protec… | ||||
| CVE-2024-58005US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tpm: Change to kvalloc() in eventlog/acpi.c
The following failure was reported on HPE ProLiant D320:
[ 10.6… | ||||
| CVE-2024-57981US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix NULL pointer dereference on certain command aborts
If a command is queued to the final usable T… | ||||
| CVE-2025-21703US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
qdisc_tree_reduce_backlog() notifies parent qdisc… | ||||
| CVE-2025-21678US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gtp: Destroy device along with udp socket's netns dismantle.
gtp_newlink() links the device to a list in dev_n… | ||||
| CVE-2024-57940US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the infinite loop in exfat_readdir()
If the file system is corrupted so that a cluster is linked to… | ||||
| CVE-2025-21653US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
syzbot found that TCA_FLOW_RSHIFT attribute was not va… | ||||
| CVE-2025-21647US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sched: sch_cake: add bounds checks to host bulk flow fairness counts
Even though we fixed a logic error in the… | ||||
| CVE-2024-53124US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: fix data-races around sk->sk_forward_alloc
Syzkaller reported this warning:
------------[ cut here ]----… | ||||
| CVE-2024-42161US | medium6.3 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
[Changes from V1:
- Use a default branch in the swit… | ||||
| CVE-2024-42154US | medium4.4 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tcp_metrics: validate source addr length
I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at… | ||||
| CVE-2024-41055US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm: prevent derefencing NULL ptr in pfn_section_valid()
Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in access… | ||||
| CVE-2024-41049US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_p… | ||||
| CVE-2024-41046US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: lantiq_etop: fix double free in detach
The number of the currently released descriptor is never… | ||||
| CVE-2024-26982US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check the inode number is not the invalid value of zero
Syskiller has produced an out of bounds acce… | ||||
references
External citations — patches, advisories, analysis.
- SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP - CSAF Versionself
- SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP - HTML Versionself
- ICS Advisory ICSA-25-072-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-072-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (38)
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan