Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Name: Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

16critical261high537medium9low

updated 2026-10-26

vulnerabilities (1,062)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	≤ vers:unknown/<v1.1
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	≤ vers:all/*
CVE-2026-24858US	—OT critical	86.6% (100th)	KEV	no fix	2026-01-27	≤ vers:unknown/*
CVE-2023-4911US	high7.8OT critical	63.8% (99th)	KEV	no fix	2023-10-03	2 versions
CVE-2022-2586US	high7.8OT critical	10.2% (96th)	KEV	V1.1	2024-01-08	2 versions
CVE-2025-10585US	critical9.8OT critical	6.06% (93rd)	KEV	no fix	2025-09-24	≤ vers:unknown/*
CVE-2026-53362US	—OT critical	0.71% (53rd)	KEV	no fix	2026-07-04	2 versions
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	no fix	2025-11-17	≤ vers:unknown/*
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	no fix	2024-11-19	2 versions
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	≤ vers:unknown/<v1.1
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	2 versions
CVE-2024-2961US	—	88.3% (100th)	Exploit	no fix	2024-04-17	≤ vers:unknown/<v1.1
CVE-2022-1292US	high7.3	82.6% (100th)	Exploit	no fix	2022-05-03	≤ vers:intdot/<1.1
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	no fix	2023-10-18	≤ vers:unknown/<v1.1
CVE-2025-6965US	high7.7	73.5% (99th)	Exploit	no fix	2025-07-15	≤ vers:unknown/*
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	≤ vers:unknown/*
CVE-2022-2274US	critical9.8	48.2% (99th)	Exploit	no fix	2022-07-01	≤ vers:intdot/<1.1
CVE-2025-0133US	—	46.3% (99th)	Exploit	no fix	2025-05-14	≤ vers:unknown/<v1.1
CVE-2022-4304US	medium5.9	23.5% (98th)	Exploit	no fix	2023-02-08	≤ vers:intdot/<1.1
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	2 versions
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	≤ vers:unknown/*
CVE-2023-32233US	high7.8	13.4% (96th)	Exploit	no fix	2023-05-08	≤ vers:intdot/<1.1
CVE-2023-5178US	high8.8	9.62% (95th)	Exploit	no fix	2023-11-01	≤ vers:intdot/<1.1
CVE-2022-36946US	high7.5	8.87% (95th)	Exploit	no fix	2022-07-27	≤ vers:intdot/<1.1
CVE-2023-3338US	medium6.5	8.48% (95th)	Exploit	V1.1	2023-06-30	2 versions
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	no fix	2025-02-18	2 versions
CVE-2022-2588US	high7.8	5.87% (93rd)	Exploit	no fix	2024-01-08	≤ vers:intdot/<1.1
CVE-2024-5535US	—	5.58% (93rd)	Exploit	no fix	2024-06-27	2 versions
CVE-2022-34918US	high7.8	5.45% (93rd)	Exploit	V1.1	2022-07-04	2 versions
CVE-2022-2097US	medium5.3OT elevated	4.90% (92nd)	Exploit	no fix	2022-07-05	≤ vers:intdot/<1.1
CVE-2023-6246US	high7.8	4.79% (92nd)	Exploit	no fix	2024-01-31	≤ vers:unknown/<v1.1
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2023-0464US	high7.5	3.98% (90th)	Exploit	no fix	2023-03-22	≤ vers:intdot/<1.1
CVE-2022-23303US	critical9.8	3.05% (87th)	Exploit	no fix	2022-01-17	≤ vers:unknown/*
CVE-2022-32250US	high7.8	2.91% (87th)	Exploit	V1.1	2022-06-02	2 versions
CVE-2021-41617US	high7.0OT elevated	2.54% (85th)	Exploit	no fix	2021-09-26	≤ vers:unknown/<v1.1
CVE-2022-42896US	high8.8	2.45% (84th)	Exploit	V1.1	2022-11-23	2 versions
CVE-2024-28085US	—	2.24% (83rd)	Exploit	no fix	2024-03-27	≤ vers:unknown/<v1.1
CVE-2026-43503US	—	1.99% (80th)	Exploit	no fix	2026-05-23	2 versions
CVE-2025-7783US	—OT elevated	1.81% (78th)	Exploit	no fix	2025-07-18	≤ vers:unknown/*
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	no fix	2024-08-30	≤ vers:unknown/<v1.1
CVE-2023-35001US	high7.8	1.54% (75th)	Exploit	no fix	2023-07-05	≤ vers:intdot/<1.1
CVE-2022-1015US	medium6.6	1.49% (74th)	Exploit	V1.1	2022-04-29	2 versions
CVE-2022-3564US	high7.1	1.46% (73rd)	Exploit	no fix	2022-10-17	≤ vers:intdot/<1.1
CVE-2022-2602US	high7.0	1.43% (73rd)	Exploit	V1.1	2024-01-08	2 versions
CVE-2026-0273US	high7.2	1.34% (71st)	Exploit	no fix	2026-06-10	≤ vers:unknown/*
CVE-2022-2078US	medium5.5	1.04% (64th)	Exploit	V1.1	2022-06-30	2 versions
CVE-2026-23231US	high7.8	1.03% (63rd)	Exploit	no fix	2026-03-04	2 versions
CVE-2025-69421US	high7.5	0.94% (61st)	Exploit	no fix	2026-01-27	2 versions
CVE-2022-42703US	medium5.5	0.92% (60th)	Exploit	no fix	2022-10-09	≤ vers:intdot/<1.1

showing 50 of 1,062

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation415 CVEs
CWE-416Use After Free189 CVEs
CWE-476NULL Pointer Dereference148 CVEs
CWE-125Out-of-bounds Read110 CVEs
CWE-787Out-of-bounds Write91 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')79 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer71 CVEs
CWE-667Improper Locking65 CVEs

sources (3)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan