Skip to contentSiemens Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp vulnerabilities
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...CVE-2023-27534Fix available8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +6 more +8 moressh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop...CVE-2023-28531Fix available9.8 Critical
- systemd project systemd, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd before 247 does not adequately block local privilege escalation for some Sudo...CVE-2023-26604Fix available7.8 High
- gnu libmicrohttpd, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of...CVE-2023-27371Fix available5.9 Medium
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23915Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23914Fix available9.1 Critical
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 moreX.400 address type confusion in X.509 GeneralNameCVE-2023-0286Public exploitFix availableEPSS 68.4%7.4 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreUse-after-free following BIO_new_NDEFCVE-2023-0215Fix available7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreDouble free after calling PEM_read_bio_exCVE-2022-4450Fix availableEPSS 28.6%7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +8 more +10 moreTiming Oracle in RSA DecryptionCVE-2022-4304Public exploitFix availableEPSS 23.5%5.9 Medium
- gnu c library, glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA vulnerability was found in GNU C Library 2.38. It has been declared as critical. This...CVE-2023-0687Fix availableDisputed4.6 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moresprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some...CVE-2023-25139Fix available9.8 Critical
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...CVE-2022-48303Fix available5.5 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic s7-1500 cpu 1510sp f-1 pn +138 more +140 moreAffected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity...CVE-2022-387734.6 Medium
- haxx curl, apple macos, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...CVE-2022-43552Fix available5.9 Medium
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446954.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +166 more +168 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446945.5 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-446934.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...CVE-2021-403657.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreSQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not...CVE-2022-46908Fix available7.3 High
- systemd project systemd, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a...CVE-2022-45873Fix available5.5 Medium
- heimdal project heimdal, mit kerberos 5, samba +3 more +5 moreImportant: krb5 security updateCVE-2022-42898Fix available8.8 High
- gnu bash, redhat enterprise linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the bash package, where a heap-buffer overflow can occur in valid...CVE-2022-3715Fix available7.8 High
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c....CVE-2022-3821Fix available5.5 Medium
- siemens 6ag1151-8ab01-7ab0 firmware, 6ag1151-8fb01-2ab0 firmware, 6ag1314-6eh04-7ab0 firmware +211 more +213 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET...CVE-2022-306946.5 Medium
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +4 more +6 moreIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...CVE-2022-42916Fix available7.5 High
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...CVE-2022-43680Public exploitFix available7.5 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...CVE-2021-46848Fix available9.1 Critical
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can...CVE-2022-40304Fix available7.8 High
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with...CVE-2022-40303Fix availableEPSS 41.4%7.5 High
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functionsCVE-2022-37454Fix available9.8 Critical
- linux-pam, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for...CVE-2022-28321Fix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +3 more +5 morelibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674Fix available8.1 High
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...CVE-2020-10735Fix available7.5 High
- fedoraproject fedora, gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows...CVE-2021-3826Fix available6.5 Medium
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that...CVE-2020-35527Fix available9.8 Critical
- sqlite, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 moreIn SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.CVE-2020-35525Fix available7.5 High
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...CVE-2022-35252Fix available3.7 Low
- Show moreLoading…