Skip to content

Vulnerabilities of Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Is your version affected?

CVE Summary Score Published
CVE-2019-9169 In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer… Not rated Feb 26, 2019
CVE-2019-7309 In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly… Not rated Feb 3, 2019
CVE-2019-6111 An issue was discovered in OpenSSH 7.9 5.9 Medium Jan 31, 2019
CVE-2019-6110 In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or… 6.8 Medium Jan 31, 2019
CVE-2019-6109 An issue was discovered in OpenSSH 7.9 6.8 Medium Jan 31, 2019
CVE-2016-10739 In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string… Not rated Jan 21, 2019
CVE-2019-6488 The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture,… Not rated Jan 18, 2019
CVE-2018-20482 GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to… Not rated Dec 26, 2018
CVE-2018-19591 In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads… 7.5 High Dec 4, 2018
CVE-2018-18928 International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in… Not rated Nov 4, 2018
CVE-2017-15422 Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1,… Not rated Aug 28, 2018
CVE-2018-14567 libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a… Not rated Aug 16, 2018
CVE-2018-14404 A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8… 6.5 Medium Jul 19, 2018
CVE-2018-0495 Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be… Not rated Jun 13, 2018
CVE-2017-18258 The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory… Not rated Apr 8, 2018
CVE-2017-7376 Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port… Not rated Feb 19, 2018
CVE-2017-7375 A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request… 9.8 Critical Feb 19, 2018
CVE-2017-17512 sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the… Not rated Dec 11, 2017
CVE-2017-16932 parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities 7.5 High Nov 23, 2017
CVE-2017-16931 parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the… Not rated Nov 23, 2017
CVE-2017-0663 A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute… Not rated Jun 14, 2017
CVE-2017-9050 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in… 7.5 High May 18, 2017
CVE-2017-9049 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function… 7.5 High May 18, 2017
CVE-2017-9048 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow 7.5 High May 18, 2017
CVE-2017-9047 A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801 Not rated May 18, 2017

Other Siemens products