Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-1343 | The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response | Not rated | May 3, 2022 |
| CVE-2022-1292 | The c_rehash script allows command injection | Not rated | May 3, 2022 |
| CVE-2022-29824 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for… | Not rated | May 3, 2022 |
| CVE-2022-1304 | An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5 | 7.8 High | Apr 14, 2022 |
| CVE-2015-20107 | In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in… | 7.8 High | Apr 13, 2022 |
| CVE-2022-27943 | libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new | 5.5 Medium | Mar 26, 2022 |
| CVE-2018-25032 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant… | 7.5 High | Mar 25, 2022 |
| CVE-2022-0778 | The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… | Not rated | Mar 15, 2022 |
| CVE-2022-26488 | In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured | Not rated | Mar 7, 2022 |
| CVE-2021-3733 | There's a flaw in urllib's AbstractBasicAuthHandler class | Not rated | Mar 7, 2022 |
| CVE-2021-3737 | A flaw was found in python | 7.5 High | Mar 4, 2022 |
| CVE-2022-23308 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes | 7.5 High | Feb 26, 2022 |
| CVE-2022-24407 | In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE… | Not rated | Feb 23, 2022 |
| CVE-2022-0563 | A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support | 5.5 Medium | Feb 21, 2022 |
| CVE-2022-25314 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString | 7.5 High | Feb 18, 2022 |
| CVE-2022-25315 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames | 9.8 Critical | Feb 18, 2022 |
| CVE-2022-25313 | In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting… | 6.5 Medium | Feb 18, 2022 |
| CVE-2022-25235 | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a… | 9.8 Critical | Feb 16, 2022 |
| CVE-2022-25236 | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace… | 9.8 Critical | Feb 16, 2022 |
| CVE-2021-44879 | In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a… | Not rated | Feb 13, 2022 |
| CVE-2022-0391 | A flaw was found in Python, specifically within the urllib.parse module | 7.5 High | Feb 9, 2022 |
| CVE-2022-23990 | Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function | 7.5 High | Jan 26, 2022 |
| CVE-2022-23852 | Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero… | 9.8 Critical | Jan 24, 2022 |
| CVE-2021-46195 | GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c | Not rated | Jan 14, 2022 |
| CVE-2022-23219 | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34… | 9.8 Critical | Jan 14, 2022 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91