Skip to content

Known vulnerabilities in Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Is your version affected?

CVE Summary Score Published
CVE-2021-3177 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code… 9.8 Critical Jan 19, 2021
CVE-2019-25013 The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input… 5.9 Medium Jan 4, 2021
CVE-2020-29361 An issue was discovered in p11-kit 0.21.1 through 0.23.21 Not rated Dec 16, 2020
CVE-2020-29362 An issue was discovered in p11-kit 0.21.1 through 0.23.21 Not rated Dec 16, 2020
CVE-2020-29363 An issue was discovered in p11-kit 0.23.6 through 0.23.21 Not rated Dec 16, 2020
CVE-2020-8177 curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead… 7.8 High Dec 14, 2020
CVE-2020-8169 curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial… Not rated Dec 14, 2020
CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient… Not rated Dec 14, 2020
CVE-2020-8231 Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data Not rated Dec 14, 2020
CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP… 7.5 High Dec 14, 2020
CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP… 3.7 Low Dec 14, 2020
CVE-2020-25692 A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for… Not rated Dec 8, 2020
CVE-2020-29573 sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer… Not rated Dec 5, 2020
CVE-2020-29562 The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an… 4.8 Medium Dec 4, 2020
CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded… 7.5 High Nov 6, 2020
CVE-2020-26116 http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF… Not rated Sep 27, 2020
CVE-2020-24659 An issue was discovered in GnuTLS before 3.6.15 Not rated Sep 4, 2020
CVE-2020-24977 GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at… Not rated Sep 3, 2020
CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick… 7.8 High Jul 24, 2020
CVE-2020-15801 In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from… Not rated Jul 17, 2020
CVE-2019-20907 In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when… 5.5 Medium Jul 13, 2020
CVE-2020-15523 In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan… Not rated Jul 4, 2020
CVE-2020-14145 The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm… 5.9 Medium Jun 29, 2020
CVE-2020-15358 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow… Not rated Jun 27, 2020
CVE-2020-14422 Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes,… Not rated Jun 18, 2020

Other Siemens products