Known vulnerabilities in Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-24855 | A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function | 5.0 Medium | Feb 5, 2024 |
| CVE-2023-52426 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time | 5.5 Medium | Feb 4, 2024 |
| CVE-2023-52425 | libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in… | 7.5 High | Feb 4, 2024 |
| CVE-2023-6780 | An integer overflow was found in the __vsyslog_internal function of the glibc library | 5.3 Medium | Jan 31, 2024 |
| CVE-2023-6779 | An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library | 8.2 High | Jan 31, 2024 |
| CVE-2023-6246 | A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library | 8.4 High | Jan 31, 2024 |
| CVE-2023-6932 | A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege… | 7.8 High | Dec 19, 2023 |
| CVE-2023-6931 | A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to… | 7.8 High | Dec 19, 2023 |
| CVE-2023-6817 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local… | 7.8 High | Dec 18, 2023 |
| CVE-2023-51385 | In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and… | 6.5 Medium | Dec 18, 2023 |
| CVE-2023-51384 | In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied | 5.5 Medium | Dec 18, 2023 |
| CVE-2023-48795 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows… | 5.9 Medium | Dec 18, 2023 |
| CVE-2023-46156 | Affected devices improperly handle specially crafted packets sent to port 102/tcp | 7.5 High | Dec 12, 2023 |
| CVE-2023-46219 | When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent… | 5.3 Medium | Dec 12, 2023 |
| CVE-2023-46218 | This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than… | 6.5 Medium | Dec 7, 2023 |
| CVE-2023-5981 | Gnutls: timing side-channel in the rsa-psk authentication | 5.9 Medium | Nov 28, 2023 |
| CVE-2023-6121 | Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get | 4.3 Medium | Nov 16, 2023 |
| CVE-2023-5678 | Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be… | Not rated | Nov 6, 2023 |
| CVE-2023-46862 | An issue was discovered in the Linux kernel through 6.5.9 | Not rated | Oct 29, 2023 |
| CVE-2023-5717 | A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be… | 7.8 High | Oct 25, 2023 |
| CVE-2023-5363 | Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths | Not rated | Oct 24, 2023 |
| CVE-2023-38545 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake | 8.8 High | Oct 18, 2023 |
| CVE-2023-38546 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of… | Not rated | Oct 18, 2023 |
| CVE-2023-45898 | The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent | 7.8 High | Oct 16, 2023 |
| CVE-2023-45871 | An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3 | Not rated | Oct 15, 2023 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91