Skip to contentSiemens Simatic S7-1500 Cpu vulnerabilities
- linux kernel, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +5 more +7 moreIn gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not...CVE-2021-44879Fix available5.5 Medium
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-372057.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +54 more +56 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-372047.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...CVE-2021-371857.5 High
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...CVE-2021-3999Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...CVE-2021-3998Fix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 moreExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...CVE-2022-23852Public exploitFix available9.8 Critical
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust...CVE-2021-46195Fix available5.5 Medium
- gnu glibc, debian linux, oracle communications cloud native core binding support function +8 more +10 moreThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka...CVE-2022-23219Fix available9.8 Critical
- gnu glibc, debian linux, oracle communications cloud native core unified data repository +4 more +6 moreThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ...CVE-2022-23218Fix available9.8 Critical
- cryptsetup project cryptsetup, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIt was found that a specially crafted LUKS header could trick cryptsetup into disabling...CVE-2021-4122Fix available4.3 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...CVE-2021-3997Fix available5.5 Medium
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moreaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22822Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morebuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22823Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moredefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22824Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morelookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22825Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morenextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22826Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22827Fix available8.8 High
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...CVE-2021-46143Public exploitFix available8.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- gmplib gmp, debian linux, netapp active iq unified manager +8 more +10 moreGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...CVE-2021-43618Fix available7.5 High
- gnu glibc, oracle communications cloud native core binding support function, communications cloud native core network function cloud native environment +7 more +9 moreIn iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force...CVE-2021-43396Fix availableDisputed7.5 High
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- unicode international components for unicode, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreInternational Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free...CVE-2020-21913Fix available5.5 Medium
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- sqlite, apple iphone os, macos +6 more +8 moreSegmentation fault vulnerability in SQLite sqlite3 3.36.0 via the idxGetTableInfo function, in...CVE-2021-36690Fix availableDisputed7.5 High
- mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...CVE-2021-37750Fix available6.5 Medium
- gnu glibc, fedoraproject fedora, oracle communications cloud native core binding support function +8 more +10 moreIn librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c...CVE-2021-38604Fix available7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7 plcsim advanced +59 more +61 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...CVE-2020-283975.3 Medium
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...CVE-2021-37600Fix availableDisputed5.5 Medium
- mit kerberos 5, debian linux, netapp active iq unified manager +7 more +9 moreec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...CVE-2021-36222Fix availableEPSS 10.5%7.5 High
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...CVE-2021-35942Fix available9.1 Critical
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...CVE-2021-33910Fix available5.5 Medium
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...CVE-2021-36087Fix available3.3 Low
- debian linux, selinux project selinux, fedoraproject fedora +19 more +21 moreThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...CVE-2021-36086Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36085Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36084Fix available3.3 Low
- [unknown] nettle, debian linux, netapp ontap select deploy administration utility +4 more +6 moreA flaw was found in the way nettle's RSA decryption functions handled specially crafted...CVE-2021-3580Fix available7.5 High
- Show moreLoading…