Vulnerabilities of Siemens SINEC NMS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-28182 | nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C | 5.3 Medium | Apr 4, 2024 |
| CVE-2024-2466 | libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to… | 6.5 Medium | Mar 27, 2024 |
| CVE-2024-2379 | libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL | 6.3 Medium | Mar 27, 2024 |
| CVE-2024-2398 | When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the… | 8.6 High | Mar 27, 2024 |
| CVE-2024-2004 | When a protocol selection parameter option disables all protocols without adding any then the default set of protocols… | 3.5 Low | Mar 27, 2024 |
| CVE-2024-28757 | libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via… | 7.5 High | Mar 10, 2024 |
| CVE-2024-23812 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) | 8.0 High | Feb 13, 2024 |
| CVE-2024-23811 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) | 8.8 High | Feb 13, 2024 |
| CVE-2024-23810 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1) | 8.8 High | Feb 13, 2024 |
| CVE-2024-25062 | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5 | 7.5 High | Feb 4, 2024 |
| CVE-2023-52426 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time | 5.5 Medium | Feb 4, 2024 |
| CVE-2023-52425 | libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in… | 7.5 High | Feb 4, 2024 |
| CVE-2024-0727 | Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of… | Not rated | Jan 26, 2024 |
| CVE-2023-6129 | Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the… | Not rated | Jan 9, 2024 |
| CVE-2023-46285 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… | 7.5 High | Dec 12, 2023 |
| CVE-2023-46284 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… | 7.5 High | Dec 12, 2023 |
| CVE-2023-46283 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… | 7.5 High | Dec 12, 2023 |
| CVE-2023-46282 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… | 7.1 High | Dec 12, 2023 |
| CVE-2023-46281 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… | 7.1 High | Dec 12, 2023 |
| CVE-2023-46219 | When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent… | 5.3 Medium | Dec 12, 2023 |
| CVE-2023-46218 | This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than… | 6.5 Medium | Dec 7, 2023 |
| CVE-2023-5678 | Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be… | Not rated | Nov 6, 2023 |
| CVE-2023-5363 | Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths | Not rated | Oct 24, 2023 |
| CVE-2023-44315 | A vulnerability has been identified in SINEC NMS (All versions < V2.0) | 4.7 Medium | Oct 10, 2023 |
| CVE-2022-30527 | A vulnerability has been identified in SINEC NMS (All versions < V2.0) | 7.8 High | Oct 10, 2023 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91