Aller au contenu

Vulnérabilités connues pour Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-1206 A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user… Non notée 30 juin 2023
CVE-2023-3212 A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel Non notée 23 juin 2023
CVE-2023-34969 D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon 6.5 Moyenne 8 juin 2023
CVE-2023-2650 Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow Non notée 30 mai 2023
CVE-2023-2953 A vulnerability was found in openldap 7.5 Élevée 30 mai 2023
CVE-2021-31239 An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c… 7.5 Élevée 9 mai 2023
CVE-2023-31085 An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2 Non notée 24 avr. 2023
CVE-2023-29469 An issue was discovered in libxml2 before 2.10.4 6.5 Moyenne 24 avr. 2023
CVE-2023-28484 In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently… 6.5 Moyenne 24 avr. 2023
CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory… Non notée 14 avr. 2023
CVE-2023-29383 In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change… Non notée 14 avr. 2023
CVE-2023-27538 An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH… 7.7 Élevée 30 mars 2023
CVE-2023-27537 A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles" Non notée 30 mars 2023
CVE-2023-27536 An authentication bypass vulnerability exists… 5.9 Moyenne 30 mars 2023
CVE-2023-27535 An authentication bypass vulnerability exists in… 5.9 Moyenne 30 mars 2023
CVE-2023-27534 A path traversal vulnerability exists in… 8.8 Élevée 30 mars 2023
CVE-2023-27533 A vulnerability in input validation exists in… 9.8 Critique 30 mars 2023
CVE-2023-0466 The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when… Non notée 28 mars 2023
CVE-2023-0465 Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious… Non notée 28 mars 2023
CVE-2023-1077 In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as… Non notée 27 mars 2023
CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509… Non notée 22 mars 2023
CVE-2023-28531 ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints Non notée 17 mars 2023
CVE-2023-26604 systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible… 7.8 Élevée 3 mars 2023
CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data… 5.9 Moyenne 28 févr. 2023
CVE-2023-23915 A cleartext transmission of sensitive information vulnerability exists in… 6.5 Moyenne 23 févr. 2023

Autres produits Siemens