Skip to contentSiemens Simatic S7-1500 Cpu 1518-4 Pn/dp vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leakCVE-2024-28834Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verificationCVE-2024-28835Fix available5.0 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morecrypto: scomp - fix req->dst buffer overflowCVE-2023-52612Fix available7.8 High
- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...CVE-2024-28757Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibgcrypt: vulnerable to marvin attackCVE-2024-2236Fix available5.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet: dsa: fix netdev_priv() dereference before check on non-DSA netdevice eventsCVE-2024-26596Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEDAC/thunderx: Fix possible out-of-bounds string accessCVE-2023-52464Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moref2fs: fix to avoid dirent corruptionCVE-2023-52444Fix available7.8 High
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreRace condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()CVE-2024-24855Fix available5.0 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 morelibexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile...CVE-2023-52426Fix available5.5 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 morelibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...CVE-2023-52425Fix available7.5 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: integer overflow in __vsyslog_internal()CVE-2023-6780Fix available5.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()CVE-2023-6779Fix available8.2 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: heap-based buffer overflow in __vsyslog_internal()CVE-2023-6246Public exploitFix available8.4 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreUse-after-free in Linux kernel's ipv4: igmp componentCVE-2023-6932Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreOut-of-bounds write in Linux kernel's Performance Events system componentCVE-2023-6931Public exploitFix available7.8 High
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...CVE-2023-51385Public exploitFix availableEPSS 19.8%6.5 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreIn ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied....CVE-2023-51384Fix available5.5 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2023-6817Fix available7.8 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +150 more +152 moreAffected devices improperly handle specially crafted packets sent to port 102/tcp.
This could...CVE-2023-461567.5 High
- curl, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreWhen saving HSTS data to an excessively long file name, curl could end up
removing all contents,...CVE-2023-46219Fix available5.3 Medium
- curl, fedoraproject fedora, siemens ruggedcom rox mx5000 +14 more +16 moreThis flaw allows a malicious HTTP server to set "super cookies" in curl that
are then passed back...CVE-2023-46218Fix available6.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +9 more +11 moreKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_getCVE-2023-6121Fix available4.3 Medium
- openssl, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +7 more +9 moreExcessive time spent in DH check / generation with large Q parameter valueCVE-2023-5678Fix available5.3 Medium
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an...CVE-2023-46862Fix available4.7 Medium
- linux kernel, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +5 more +7 moreOut-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) componentCVE-2023-5717Public exploitFix available7.8 High
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processingCVE-2023-5363Fix available7.5 High
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreThe Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to...CVE-2023-45898Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreAn issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the...CVE-2023-45871Fix available7.5 High
- smihica pyminizip, zlib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependencyCVE-2023-45853Fix available9.8 Critical
- curl, haxx libcurl, siemens ruggedcom ape1808 +3 more +5 moreThis flaw allows an attacker to insert cookies at will into a running program
using libcurl, if...CVE-2023-38546Fix available3.7 Low
- curl, fedoraproject fedora, haxx libcurl +15 more +17 moreThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is...CVE-2023-38545Public exploitFix availableEPSS 78.3%9.8 Critical
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()CVE-2023-39194Fix available3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()CVE-2023-39193Fix available6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()CVE-2023-39192Fix available6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()CVE-2023-39189Fix available5.1 Medium
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain...CVE-2023-45322Fix availableDisputed6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()CVE-2023-42755Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()CVE-2023-42754Fix available5.5 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: sch_qfq componentCVE-2023-4921Fix available7.8 High
- gnu gcc, arm ltd gnu toolchain, siemens ruggedcom rst2428p +5 more +7 moreGCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64CVE-2023-4039Fix availableDisputed4.8 Medium
- siemens simatic braumat, simatic cloud connect 7 cc712, simatic cloud connect 7 cc716 +172 more +174 moreThe ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application...CVE-2023-288318.7 High
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morePOLY1305 MAC implementation corrupts XMM registers on WindowsCVE-2023-4807Fix available7.8 High
- Show moreLoading…