Siemens SIMATIC S7-1500 CPU Family

Multiple vulnerabilities exist in the GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware version 3.1.5 and later. The vulnerabilities involve memory safety issues (buffer overflows, use-after-free, out-of-bounds access), input validation flaws (CWE-20, CWE-400), cryptographic weaknesses, and authentication bypass mechanisms. An unauthenticated attacker on the network can exploit these flaws to execute arbitrary code on the CPU without requiring credentials or user interaction. Siemens is preparing firmware fixes and recommends network protection measures and adherence to Industrial Security operational guidelines for affected installations.