Vulnerabilities of Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2018-20843 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the… | 7.5 High | Jun 24, 2019 |
| CVE-2019-12904 | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical… | Not rated | Jun 19, 2019 |
| CVE-2019-12900 | BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors | 9.8 Critical | Jun 19, 2019 |
| CVE-2019-10160 | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3… | 9.8 Critical | Jun 7, 2019 |
| CVE-2019-8457 | SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when… | Not rated | May 30, 2019 |
| CVE-2019-5436 | A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions… | 7.8 High | May 28, 2019 |
| CVE-2019-5435 | An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1 | Not rated | May 28, 2019 |
| CVE-2018-12886 | stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1… | Not rated | May 22, 2019 |
| CVE-2019-5018 | An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0 | 8.1 High | May 10, 2019 |
| CVE-2019-3856 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the… | 7.5 High | Mar 25, 2019 |
| CVE-2019-3857 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way… | 7.5 High | Mar 25, 2019 |
| CVE-2019-3860 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed | 5.0 Medium | Mar 25, 2019 |
| CVE-2019-3861 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value… | 5.0 Medium | Mar 25, 2019 |
| CVE-2019-3863 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side | 7.5 High | Mar 25, 2019 |
| CVE-2019-9948 | urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to… | 9.1 Critical | Mar 23, 2019 |
| CVE-2019-9947 | An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3 | 5.4 Medium | Mar 23, 2019 |
| CVE-2019-9937 | In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL… | Not rated | Mar 22, 2019 |
| CVE-2019-9936 | In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in… | Not rated | Mar 22, 2019 |
| CVE-2019-9923 | pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that… | 7.5 High | Mar 22, 2019 |
| CVE-2019-3858 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received… | 5.0 Medium | Mar 21, 2019 |
| CVE-2019-3855 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way… | 7.5 High | Mar 21, 2019 |
| CVE-2019-3862 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an… | 7.3 High | Mar 20, 2019 |
| CVE-2019-3859 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and… | 5.0 Medium | Mar 20, 2019 |
| CVE-2019-9740 | An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3 | 6.5 Medium | Mar 13, 2019 |
| CVE-2019-9636 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an… | 5.3 Medium | Mar 8, 2019 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91