CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active

Reset filters

Search: SSA-794697

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-794697

SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1

Siemens — SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Siemens ProductCERTcritical

Published

13 June 2023

Last update

13 October 2026

Linked CVEs

CVE-2020-12762 CVE-2021-3759 CVE-2021-4037 CVE-2021-33655 CVE-2021-44879 CVE-2022-0171 CVE-2022-1012 CVE-2022-1015 CVE-2022-2097 CVE-2022-2586 CVE-2023-4911 CVE-2023-7104 CVE-2023-48795 CVE-2023-51384

Affected sectors

Risk evaluation

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).

Mitigation summary

Only build and run applications from trusted sources

Revision history (4)

Initial publication — 13 June 2023
Publication Date
Update A — 11 July 2023
Added CVE-2022-4269, CVE-2023-3141, CVE-2023-3268, CVE-2023-31436, CVE-2023-32233
Update B — 8 August 2023
Added CVE-2023-3446, CVE-2023-3389, CVE-2022-1015, CVE-2023-3609
Update C — 12 September 2023
Added CVE-2023-3338

Official source: Siemens ProductCERT