Siemens S7-1500 TM MFP module has many Linux subsystem flaws

CISA ICS AdvisoriesSiemens

What happened. Multiple flaws have been found in the extra GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends mitigations for products where fixes are not yet available.

Who is affected. All versions of the SIMATIC S7-1500 TM MFP GNU/Linux subsystem.

What to do. Check whether you run the SIMATIC S7-1500 TM MFP and apply Siemens' recommended mitigations until fixes are released.

Editor's reading

Forasset ownerOT security lead

Purdue level: L1
Level 1, basic control (PLCs, RTUs, safety controllers)
Why: The SIMATIC S7-1500 TM MFP is a module for the S7-1500 programmable logic controller (PLC) family, which sits at Purdue level 1.
Are you exposed?: Search the asset inventory for SIMATIC S7-1500 TM MFP modules, as all versions of the GNU/Linux subsystem are affected.

Inferred from the facts above, not stated by the source. Check it against your own site before acting.

Source: CISA ICS Advisories (opens cisa.gov)

More from this briefing

Read the full issue Executive report Get it by email