Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp vulnerabilities
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: check skb is non-NULL in tcp_rto_delta_us()CVE-2024-47684Fix available5.5 Medium
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +84 more +86 moreThe web server of affected devices do not properly authenticate user request to the '/ClientArea...CVE-2024-468876.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +123 more +125 moreThe web server of affected devices does not properly validate input that is used for a user...CVE-2024-468865.1 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAFCVE-2024-46786Fix available7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morePCI: Add missing bridge lock to pci_bus_lock()CVE-2024-46750Fix available7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreInput: uinput - reject requests with unreasonable number of slotsCVE-2024-46745Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreof/irq: Prevent device address out-of-bounds read in interrupt map walkCVE-2024-46743Fix available7.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreblk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_noneCVE-2023-53292Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreNFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAINCVE-2025-38393Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()CVE-2025-21867Fix available7.8 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morex86/mm: Fix pti_clone_pgtable() alignment assumptionCVE-2024-44965Fix available5.5 Medium
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checksCVE-2024-6119Fix availableEPSS 66.6%7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: ctnetlink: use helper function to calculate expect IDCVE-2024-44944Fix available5.5 Medium
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an...CVE-2024-45492Fix available9.8 Critical
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer...CVE-2024-45491Fix available9.8 Critical
- libexpat project libexpat, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +4 more +6 moreAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length...CVE-2024-45490Public exploitFix available7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moredevres: Fix memory leakage caused by driver API devm_free_percpu()CVE-2024-43871Fix available5.5 Medium
- curl, haxx libcurl, siemens ruggedcom rst2428p +19 more +21 moreASN.1 date parser overreadCVE-2024-7264Fix availableEPSS 20.2%6.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp_metrics: validate source addr lengthCVE-2024-42154Fix available4.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moremm: avoid overflows in dirty throttling logicCVE-2024-42131Fix available4.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreinet_diag: Initialize pad field in struct inet_diag_req_v2CVE-2024-42106Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morex86: stop playing stack games in profile_pc()CVE-2024-42096Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moregfs2: Fix NULL pointer dereference in gfs2_log_flushCVE-2024-42079Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersCVE-2024-42070Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenet: ethernet: lantiq_etop: fix double free in detachCVE-2024-41046Fix available8.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morexfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()CVE-2024-40959Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morescsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memoryCVE-2024-40901Fix available7.3 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreipv6: sr: fix memleak in seg6_hmac_init_algoCVE-2024-39489Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()CVE-2024-39487Fix available7.1 High
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS...CVE-2024-37371Fix available9.1 Critical
- mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count...CVE-2024-37370Fix available7.5 High
- openssl, debian linux, netapp 500f firmware +40 more +42 moreSSL_select_next_proto buffer overreadCVE-2024-5535Public exploitFix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errorsCVE-2024-39469Fix available7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreum: Add winch to winch_handlers before registering winch IRQCVE-2024-39292Fix available7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moredma-buf/sw-sync: don't enable IRQ from sync_print_obj()CVE-2024-38780Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moremedia: stk1160: fix bounds checking in stk1160_copy_video()CVE-2024-38621Fix available7.1 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: Fix shift-out-of-bounds in dctcp_update_alpha().CVE-2024-37356Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenet: relax socket state check at accept time.CVE-2024-36484Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenetfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()CVE-2024-36286Fix available7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outboundCVE-2024-33621Fix available5.5 Medium
- linux, linux kernel, acrn +7 more +9 moreipv6: sr: fix invalid unregister error pathCVE-2024-38612Fix available7.0 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moremd: fix resync softlockup when bitmap size is less than array sizeCVE-2024-38598Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreaf_unix: Fix data races in unix_release_sock/unix_stream_sendmsgCVE-2024-38596Fix available4.7 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned fileCVE-2024-5742Fix available6.7 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebna: ensure the copied buf is NUL terminatedCVE-2024-36934Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: Fix uninit-value access in __ip_make_skb()CVE-2024-36927Fix available4.7 Medium
- Show moreLoading…