Skip to contentSiemens Simatic S7-1500 Cpu 1518-4 Pn/dp vulnerabilities
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenetrom: Fix memory leak in nr_sendmsg()CVE-2025-68787Fix available5.7 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morescsi: target: Reset t_task_cdb pointer in error caseCVE-2025-68782Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet/hsr: fix NULL pointer dereference in prp_get_untagged_frame()CVE-2025-68776Fix available5.7 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morespi: fsl-cpm: Check length parity before switching to 16 bit modeCVE-2025-68773Fix availableNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreNFS: Automounted filesystems should inherit ro,noexec,nodev,sync flagsCVE-2025-68764Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebpf: Fix invalid prog->stats access when update_effective_progs failsCVE-2025-68742Fix available5.6 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Do not let BPF test infra emit invalid GSO types to stackCVE-2025-68725Fix available5.5 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morecrypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_idCVE-2025-68724Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morescsi: smartpqi: Fix device resources accessed after device removalCVE-2025-68371Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebpf: Check skb->transport_header is set in bpf_skb_check_mtuCVE-2025-68363Fix available1.8 Low
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreNFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalidCVE-2025-68349Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morejbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corruptedCVE-2025-68337Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moremptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().CVE-2025-68291Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebfs: Reconstruct file type when loading from diskCVE-2025-68266Fix available7.1 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 morenvme: fix admin request_queue lifetimeCVE-2025-68265Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreext4: refresh inline data size before write operationsCVE-2025-68264Fix available5.7 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()CVE-2025-68261Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 morenetfilter: nft_ct: add seqadj extension for natted connectionsCVE-2025-68206Fix available7.5 High
- linux, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()CVE-2025-40261Fix available9.8 Critical
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePCI/IOV: Fix race between SR-IOV enable/disable and hotplugCVE-2025-40219Fix availableNo score
- libexpat project libexpat, siemens ruggedcom rst2428p, simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of...CVE-2025-66382Fix available2.9 Low
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefs: quota: create dedicated workqueue for quota_release_workCVE-2025-40196Fix available5.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().CVE-2025-40149Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +4 more +6 moreipv6: use RCU in ip6_xmit()CVE-2025-40135Fix available8.1 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morevfs: Don't leak disconnected dentries on umountCVE-2025-40105Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenbd: restrict sockets to TCP and UDPCVE-2025-40080Fix available7.0 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebpf: Explicitly check accesses to bpf_sock_addrCVE-2025-40078Fix available9.1 Critical
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morepps: fix warning in pps_register_cdev when register device failCVE-2025-40070Fix available2.0 Low
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morecrypto: af_alg - Fix incorrect boolean values in af_alg_ctxCVE-2025-40022Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils ldmisc.c vfinfo out-of-boundsCVE-2025-11840Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils prdbg.c tg_tag_type return valueCVE-2025-11839Fix available4.8 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenexthop: Forbid FDB status change while nexthop is in a groupCVE-2025-39980Fix available6.8 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreocteontx2-pf: Fix potential use after free in otx2_tc_add_flow()CVE-2025-39978Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefutex: Prevent use-after-free during requeue-PICVE-2025-39977Fix available7.8 High
- linux kernel, linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +6 more +8 morecrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgCVE-2025-39964In KEVPublic exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().CVE-2025-39955Fix available7.8 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflowCVE-2025-11495Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-boundsCVE-2025-11494Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c get_link_hash_entry out-of-boundsCVE-2025-11414Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-boundsCVE-2025-11413Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-boundsCVE-2025-11412Fix available4.8 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...CVE-2025-61985Fix available3.6 Low
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...CVE-2025-61984Public exploitFix available3.6 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecgroup: split cgroup_destroy_wq into 3 workqueuesCVE-2025-39953Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - Set merge to zero early in af_alg_sendmsgCVE-2025-39931Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error pathCVE-2025-39929Fix available7.5 High
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +27 more +29 moreOut-of-bounds read in HTTP client no_proxy handlingCVE-2025-9232Fix available5.9 Medium
- openssl, debian linux, siemens ruggedcom rst2428p +27 more +29 moreOut-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230Fix available9.8 Critical
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflowCVE-2025-11083Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflowCVE-2025-11082Fix available4.8 Medium
- Show moreLoading…