Skip to contentSiemens Simatic S7-1500 Cpu vulnerabilities
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- sqlite, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...CVE-2019-8457Fix availableEPSS 45.4%9.8 Critical
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morestack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler...CVE-2018-128868.1 High
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...CVE-2019-5435Fix available3.7 Low
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- sqlite, sqlite sqlite3, canonical ubuntu linux +3 more +5 moreAn exploitable use after free vulnerability exists in the window function functionality of...CVE-2019-5018Fix available8.1 High
- siemens simatic cp 443-1 opc ua, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic hmi comfort outdoor panels 7" & 15" (incl. siplus variants) +37 more +39 moreA vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP...CVE-2019-65757.5 High
- siemens simatic cp 1604, simatic cp 1616, cp1604 firmware +141 more +143 moreA vulnerability has been identified in RFID 181EIP, SIMATIC CP 1604, SIMATIC CP 1616, SIMATIC CP...CVE-2019-65687.5 High
- siemens simatic s7-1500 cpu, simatic s7-1500 firmware +1 moreA vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5),...CVE-2018-165597.5 High
- siemens simatic s7-1500 cpu, simatic s7-1500 firmware +1 moreA vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5),...CVE-2018-165587.5 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9947Fix available6.1 Medium
- gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...CVE-2019-9923Fix available7.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual...CVE-2019-9937Fix available7.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based...CVE-2019-9936Fix available7.5 High
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...CVE-2019-9740Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, mcafee web gateway +6 more +8 moreIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...CVE-2019-9169Fix available9.8 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32...CVE-2019-7309Fix available5.5 Medium
- gnu glibc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would...CVE-2016-10739Fix available5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the...CVE-2019-6488Fix available7.8 High
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- gnu tar, debian linux, opensuse leap +3 more +5 moreGNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which...CVE-2018-20482Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname...CVE-2018-19591Fix available7.5 High
- icu-project international components for unicode, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreInternational Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl...CVE-2018-18928Fix available9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...CVE-2018-14567Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreNokogiri NULL Pointer DereferenceCVE-2018-14404Fix available7.5 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreUncontrolled resource consumption in nokogiriCVE-2017-18258Fix available6.5 Medium
- siemens simatic cp 343-1 (incl. siplus variants), simatic cp 343-1 advanced (incl. siplus variants), simatic cp 443-1 +52 more +54 moreA vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1...CVE-2018-48436.5 Medium
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +121 more +123 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...CVE-2017-127418.7 High
- sensible-utils project sensible-utils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moresensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...CVE-2017-17512Fix available8.8 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...CVE-2017-16931Fix available9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-16932Fix available7.5 High
- xmlsoft libxml2, debian linux, google android +3 more +5 moreBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...CVE-2017-7376Public exploitFix availableEPSS 23.2%9.8 Critical
- xmlsoft libxml2, debian linux, google android +3 more +5 moreA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...CVE-2017-7375Fix available9.8 Critical
- google android, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA remote code execution vulnerability in libxml2 could enable an attacker using a specially...CVE-2017-0663Fix available7.8 High
- Show moreLoading…