Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp vulnerabilities
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) componentCVE-2023-4623Fix available7.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreXmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...CVE-2023-39615Fix availableDisputed6.5 Medium
- python, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA use-after-free exists in Python through 3.9 via heappushpop in heapq.CVE-2022-48560Fix available7.5 High
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to...CVE-2022-48522Fix available9.8 Critical
- json-c, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the...CVE-2021-32292Fix available9.8 Critical
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to...CVE-2020-22218Fix available7.5 High
- elfutils project elfutils, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 moreThe libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers...CVE-2020-21047Fix available5.5 Medium
- haxx curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreInteger overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry...CVE-2020-19909Fix availableDisputed3.3 Low
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows...CVE-2020-19190Fix available6.5 Medium
- invisible-island ncurses, debian linux, netapp active iq unified manager +3 more +5 moreBuffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in...CVE-2020-19189Fix available6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1...CVE-2020-19188Fix available6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1...CVE-2020-19187Fix available6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1...CVE-2020-19186Fix available6.5 Medium
- invisible-island ncurses, netapp active iq unified manager, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreBuffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6...CVE-2020-19185Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel...CVE-2023-40283Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreLinux: buffer overrun in netback due to unusual packetCVE-2023-34319Fix available7.8 High
- fedoraproject fedora, linux kernal, procps project procps +3 more +5 moreUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a...CVE-2023-4016Fix available2.5 Low
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreExcessive time spent checking DH q parameter valueCVE-2023-3817Fix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- gnu gdb, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function...CVE-2023-39128Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreOut-of-bounds write in Linux kernel's net/sched: sch_qfq componentCVE-2023-3611Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: cls_u32 componentCVE-2023-3609Public exploitFix available7.8 High
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive time spent checking DH keys and parametersCVE-2023-3446Fix available5.3 Medium
- openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...CVE-2023-38408Public exploitFix availableEPSS 79.7%9.8 Critical
- elfutils project elfutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which...CVE-2021-33294Fix available5.5 Medium
- envoyproxy envoy, nghttp2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codecCVE-2023-35945Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write VulnerabilityCVE-2023-35001Public exploitFix available7.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...CVE-2023-1206Public exploitFix available5.7 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- freedesktop dbus, debian linux, fedoraproject fedora +3 more +5 moreD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged...CVE-2023-34969Fix available6.5 Medium
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal dataCVE-2023-32665Fix available5.5 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer...CVE-2023-32643Fix available5.3 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of...CVE-2023-32636Fix available4.7 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputsCVE-2023-32611Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()CVE-2023-29499Fix available5.5 Medium
- openldap, apple macos, netapp active iq unified manager +11 more +13 moreA vulnerability was found in openldap. This security flaw causes a null pointer dereference in...CVE-2023-2953Fix available7.5 High
- openssl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePossible DoS translating ASN.1 object identifiersCVE-2023-2650Fix availableEPSS 75.4%6.5 Medium
- sqlite, siemens ruggedcom crossbow, simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of...CVE-2021-31239Fix available7.5 High
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreAn issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by...CVE-2023-31085Fix available5.5 Medium
- invisible-island ncurses, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 morencurses before 6.4 20230408, when used by a setuid application, allows local users to trigger...CVE-2023-29491Fix available7.8 High
- shadow project shadow, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 moreIn Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...CVE-2023-29383Fix available3.3 Low
- xmlsoft libxml2, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted...CVE-2023-29469Fix available6.5 Medium
- xmlsoft libxml2, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer...CVE-2023-28484Fix available6.5 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreCertificate policy check not enabledCVE-2023-0466Fix available5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreInvalid certificate policies in leaf certificates are silently ignoredCVE-2023-0465Fix available5.3 Medium
- debian linux, linux kernel, netapp 8300 firmware +13 more +15 moreIn the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the...CVE-2023-1077Fix available7.0 High
- openssl, siemens bfcclient, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive Resource Usage Verifying X.509 Policy ConstraintsCVE-2023-0464Public exploitFix available7.5 High
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...CVE-2023-27537Fix available5.9 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- Show moreLoading…