Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-23218 | The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through… | 9.8 Critical | Jan 14, 2022 |
| CVE-2022-22822 | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 9.8 Critical | Jan 8, 2022 |
| CVE-2022-22823 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 9.8 Critical | Jan 8, 2022 |
| CVE-2022-22824 | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 9.8 Critical | Jan 8, 2022 |
| CVE-2022-22825 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 8.8 High | Jan 8, 2022 |
| CVE-2022-22826 | nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 8.8 High | Jan 8, 2022 |
| CVE-2022-22827 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow | 8.8 High | Jan 8, 2022 |
| CVE-2021-46143 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize | 8.1 High | Jan 6, 2022 |
| CVE-2021-45960 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can… | 8.8 High | Jan 1, 2022 |
| CVE-2021-43618 | GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer… | Not rated | Nov 15, 2021 |
| CVE-2021-43396 | In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a… | Not rated | Nov 4, 2021 |
| CVE-2021-22947 | When curl >= 7.20.0… | 5.9 Medium | Sep 29, 2021 |
| CVE-2021-22946 | A user can tell curl >= 7.20.0… | 7.5 High | Sep 29, 2021 |
| CVE-2021-41617 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege… | Not rated | Sep 26, 2021 |
| CVE-2021-22945 | When sending data to an MQTT server,… | 9.1 Critical | Sep 23, 2021 |
| CVE-2020-21913 | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the… | Not rated | Sep 20, 2021 |
| CVE-2021-36690 | A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo… | Not rated | Aug 24, 2021 |
| CVE-2021-37750 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer… | Not rated | Aug 23, 2021 |
| CVE-2021-38604 | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain… | 7.5 High | Aug 12, 2021 |
| CVE-2021-22924 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them… | 3.7 Low | Aug 5, 2021 |
| CVE-2021-3580 | A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext | Not rated | Aug 5, 2021 |
| CVE-2021-22926 | libcurl-using applications can ask for a specific client certificate to be used in a transfer | 7.5 High | Aug 5, 2021 |
| CVE-2021-22925 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl | 5.3 Medium | Aug 5, 2021 |
| CVE-2021-22923 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the… | Not rated | Aug 5, 2021 |
| CVE-2021-22922 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash… | 6.5 Medium | Aug 5, 2021 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91