Skip to content

Vulnerabilities of Siemens SINAMICS PERFECT HARMONY GH180

Is your version affected?

CVE Summary Score Published
CVE-2022-35252 When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when… 3.7 Low Sep 23, 2022
CVE-2022-36946 nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a… 7.5 High Jul 27, 2022
CVE-2022-32208 When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly 5.9 Medium Jul 7, 2022
CVE-2022-32207 When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing… 9.8 Critical Jul 7, 2022
CVE-2022-32206 curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple… 6.5 Medium Jul 7, 2022
CVE-2022-32205 A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0… 4.3 Medium Jul 7, 2022
CVE-2022-1473 The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by… Not rated May 3, 2022
CVE-2022-1343 The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response Not rated May 3, 2022
CVE-2022-1292 The c_rehash script allows command injection Not rated May 3, 2022
CVE-2018-25032 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant… 7.5 High Mar 25, 2022
CVE-2022-23308 valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes 7.5 High Feb 26, 2022

Other Siemens products