CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:02.

Filters

1 active

Reset filters

Search: SSA-265688

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-265688

SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1

Siemens — SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Siemens ProductCERTcritical

Published

9 April 2024

Last update

13 October 2026

Linked CVEs

CVE-2021-4090 CVE-2021-38202 CVE-2021-47002 CVE-2021-47107 CVE-2021-47316 CVE-2022-38096 CVE-2022-43945 CVE-2022-48827 CVE-2024-2511 CVE-2024-26982 CVE-2024-40945 CVE-2024-50302 CVE-2025-9230 CVE-2025-69419 CVE-2026-31431

Affected sectors

Risk evaluation

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 TM MFP V1.1 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V1.1 only; for version V1.1.1 refer to SSA-784472.

Mitigation summary

Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

Revision history (4)

Initial publication — 9 April 2024
Publication Date
Update A — 14 May 2024
Added CVE-2024-2511
Update B — 9 July 2024
Added CVE-2024-5535
Update C — 12 November 2024
Added CVE-2024-9143

Official source: Siemens ProductCERT