Siemens SIMATIC s7-1500 TM Mfp Firmware vulnerabilities

6 CVEs affecting Siemens SIMATIC s7-1500 TM Mfp Firmware, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-53362, published 2026-07-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability, published 2023-10-03. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-11-21. EPSS: 63.8% chance of exploitation in the next 30 days. A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously…
CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability, published 2024-01-08. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2024-06-26. EPSS: 10.2% chance of exploitation in the next 30 days. It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability, published 2024-11-19. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2025-03-04. EPSS: 0.8% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways,…
CVE-2026-53362: Linux Kernel Unspecified Vulnerability, published 2026-07-04. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-08-27. EPSS: 0.7% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is…
CVE-2024-49894, published 2024-10-21. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue…