View CSAF

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

The following versions of Siemens SIMATIC S7-1500 TM MFP are affected:

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem vers:all/*

CVSS Vendor Equipment

v3 10 Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

377 Vulnerabilities

Access of Uninitialized Pointer, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Deadlock, Detection of Error Condition Without Action, Double Free, Expired Pointer Dereference, Heap-based Buffer Overflow, Improper Control of Resource Identifiers ('Resource Injection'), Improper Control of a Resource Through its Lifetime, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper…