Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-40304 | An issue was discovered in libxml2 before 2.10.3 | 7.8 High | Nov 23, 2022 |
| CVE-2022-40303 | An issue was discovered in libxml2 before 2.10.3 | 7.5 High | Nov 22, 2022 |
| CVE-2022-45061 | An issue was discovered in Python before 3.11.1 | 7.5 High | Nov 9, 2022 |
| CVE-2022-3821 | An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c | 5.5 Medium | Nov 8, 2022 |
| CVE-2022-30694 | The login endpoint /FormLogin in affected web services does not apply proper origin checking | 6.5 Medium | Nov 8, 2022 |
| CVE-2022-42916 | In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP | 7.5 High | Oct 29, 2022 |
| CVE-2022-42915 | curl before 7.86.0 has a double free | 8.1 High | Oct 29, 2022 |
| CVE-2022-43680 | In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in… | 7.5 High | Oct 24, 2022 |
| CVE-2021-46848 | GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der | 9.1 Critical | Oct 24, 2022 |
| CVE-2022-37454 | The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that… | 9.8 Critical | Oct 21, 2022 |
| CVE-2022-35252 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when… | 3.7 Low | Sep 23, 2022 |
| CVE-2022-28321 | The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins | 9.8 Critical | Sep 19, 2022 |
| CVE-2022-40674 | libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c | 8.1 High | Sep 14, 2022 |
| CVE-2020-10735 | A flaw was found in python | 6.2 Medium | Sep 9, 2022 |
| CVE-2021-3826 | Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially… | Not rated | Sep 1, 2022 |
| CVE-2020-35527 | In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause | Not rated | Sep 1, 2022 |
| CVE-2020-35525 | In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing | Not rated | Sep 1, 2022 |
| CVE-2022-1271 | An arbitrary file write vulnerability was found in GNU gzip's zgrep utility | 8.8 High | Aug 31, 2022 |
| CVE-2021-4122 | It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery… | Not rated | Aug 24, 2022 |
| CVE-2021-4209 | A NULL pointer dereference flaw was found in GnuTLS | Not rated | Aug 24, 2022 |
| CVE-2021-4189 | A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode | 5.3 Medium | Aug 24, 2022 |
| CVE-2021-3998 | A flaw was found in glibc | 7.5 High | Aug 24, 2022 |
| CVE-2021-3999 | A flaw was found in glibc | 7.8 High | Aug 24, 2022 |
| CVE-2021-3997 | A flaw was found in systemd | Not rated | Aug 23, 2022 |
| CVE-2021-28861 | Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against… | 6.5 Medium | Aug 23, 2022 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91