Siemens SIMATIC S7-1500 TM MFP GNU/Linux Subsystem: 377 Vulnerabilities Disclosed
Siemens has disclosed multiple vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. A total of 377 CVEs have been assigned, covering a wide range of severity levels and vulnerability types including buffer overflows, privilege escalation, and memory safety issues. The affected component is the GNU/Linux subsystem across all versions. Siemens states that fixes are being prepared but are not yet available. Until patches are released, the vendor recommends restricting access to the interactive shell to trusted personnel only and building and running applications from trusted sources. The vulnerabilities impact critical infrastructure sectors worldwide, including manufacturing, energy, transportation, healthcare, financial services, and government facilities.