Aller au contenu

Vulnérabilités connues pour Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2022-1343 The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response Non notée 3 mai 2022
CVE-2022-1292 The c_rehash script allows command injection Non notée 3 mai 2022
CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for… Non notée 3 mai 2022
CVE-2022-1304 An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5 7.8 Élevée 14 avr. 2022
CVE-2015-20107 In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in… 7.8 Élevée 13 avr. 2022
CVE-2022-27943 libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new 5.5 Moyenne 26 mars 2022
CVE-2018-25032 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant… 7.5 Élevée 25 mars 2022
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Non notée 15 mars 2022
CVE-2022-26488 In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured Non notée 7 mars 2022
CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class Non notée 7 mars 2022
CVE-2021-3737 A flaw was found in python 7.5 Élevée 4 mars 2022
CVE-2022-23308 valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes 7.5 Élevée 26 févr. 2022
CVE-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE… Non notée 23 févr. 2022
CVE-2022-0563 A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support 5.5 Moyenne 21 févr. 2022
CVE-2022-25314 In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString 7.5 Élevée 18 févr. 2022
CVE-2022-25315 In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames 9.8 Critique 18 févr. 2022
CVE-2022-25313 In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting… 6.5 Moyenne 18 févr. 2022
CVE-2022-25235 xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a… 9.8 Critique 16 févr. 2022
CVE-2022-25236 xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace… 9.8 Critique 16 févr. 2022
CVE-2021-44879 In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a… Non notée 13 févr. 2022
CVE-2022-0391 A flaw was found in Python, specifically within the urllib.parse module 7.5 Élevée 9 févr. 2022
CVE-2022-23990 Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function 7.5 Élevée 26 janv. 2022
CVE-2022-23852 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero… 9.8 Critique 24 janv. 2022
CVE-2021-46195 GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c Non notée 14 janv. 2022
CVE-2022-23219 The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34… 9.8 Critique 14 janv. 2022

Autres produits Siemens