SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (19)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-8058US | — | — | ||
The regcomp function in the GNU C library version from 2.4 to 2.41 is
subject to a double free if some previous allocation fails. It can be
accomplished either by a malloc failur… | ||||
| CVE-2025-21826US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject mismatching sum of field_len with set key length
The field length description pro… | ||||
| CVE-2025-21806US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: let net.core.dev_weight always be non-zero
The following problem was encountered during stability test:… | ||||
| CVE-2025-21776US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
USB: hub: Ignore non-compliant devices with too many configs or interfaces
Robert Morris created a test progra… | ||||
| CVE-2025-21762US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
arp: use RCU protection in arp_xmit()
arp_xmit() can be called without RTNL or RCU protection.
Use RCU protec… | ||||
| CVE-2024-58005US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tpm: Change to kvalloc() in eventlog/acpi.c
The following failure was reported on HPE ProLiant D320:
[ 10.6… | ||||
| CVE-2024-57981US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix NULL pointer dereference on certain command aborts
If a command is queued to the final usable T… | ||||
| CVE-2025-21703US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
qdisc_tree_reduce_backlog() notifies parent qdisc… | ||||
| CVE-2025-21678US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gtp: Destroy device along with udp socket's netns dismantle.
gtp_newlink() links the device to a list in dev_n… | ||||
| CVE-2024-57940US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the infinite loop in exfat_readdir()
If the file system is corrupted so that a cluster is linked to… | ||||
| CVE-2025-21653US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
syzbot found that TCA_FLOW_RSHIFT attribute was not va… | ||||
| CVE-2025-21647US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sched: sch_cake: add bounds checks to host bulk flow fairness counts
Even though we fixed a logic error in the… | ||||
| CVE-2024-53124US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: fix data-races around sk->sk_forward_alloc
Syzkaller reported this warning:
------------[ cut here ]----… | ||||
| CVE-2024-42161US | medium6.3 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
[Changes from V1:
- Use a default branch in the swit… | ||||
| CVE-2024-42154US | medium4.4 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tcp_metrics: validate source addr length
I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at… | ||||
| CVE-2024-41055US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm: prevent derefencing NULL ptr in pfn_section_valid()
Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in access… | ||||
| CVE-2024-41049US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_p… | ||||
| CVE-2024-41046US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: lantiq_etop: fix double free in detach
The number of the currently released descriptor is never… | ||||
| CVE-2024-26982US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check the inode number is not the invalid value of zero
Syskiller has produced an out of bounds acce… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (38)
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- Kein Fix verfügbarSIMATIC S7-1500 TM MFP - BIOS
Currently no fix is available
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
- WorkaroundSIMATIC S7-1500 TM MFP - BIOS
Only build and run applications from trusted sources
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan