Aller au contenu

Vulnérabilités connues pour Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2022-23218 The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through… 9.8 Critique 14 janv. 2022
CVE-2022-22822 addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 9.8 Critique 8 janv. 2022
CVE-2022-22823 build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 9.8 Critique 8 janv. 2022
CVE-2022-22824 defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 9.8 Critique 8 janv. 2022
CVE-2022-22825 lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 8.8 Élevée 8 janv. 2022
CVE-2022-22826 nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 8.8 Élevée 8 janv. 2022
CVE-2022-22827 storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow 8.8 Élevée 8 janv. 2022
CVE-2021-46143 In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize 8.1 Élevée 6 janv. 2022
CVE-2021-45960 In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can… 8.8 Élevée 1 janv. 2022
CVE-2021-43618 GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer… Non notée 15 nov. 2021
CVE-2021-43396 In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a… Non notée 4 nov. 2021
CVE-2021-22947 When curl >= 7.20.0… 5.9 Moyenne 29 sept. 2021
CVE-2021-22946 A user can tell curl >= 7.20.0… 7.5 Élevée 29 sept. 2021
CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege… Non notée 26 sept. 2021
CVE-2021-22945 When sending data to an MQTT server,… 9.1 Critique 23 sept. 2021
CVE-2020-21913 International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the… Non notée 20 sept. 2021
CVE-2021-36690 A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo… Non notée 24 août 2021
CVE-2021-37750 The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer… Non notée 23 août 2021
CVE-2021-38604 In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain… 7.5 Élevée 12 août 2021
CVE-2021-22924 libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them… 3.7 Faible 5 août 2021
CVE-2021-3580 A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext Non notée 5 août 2021
CVE-2021-22926 libcurl-using applications can ask for a specific client certificate to be used in a transfer 7.5 Élevée 5 août 2021
CVE-2021-22925 curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl 5.3 Moyenne 5 août 2021
CVE-2021-22923 When curl is instructed to get content using the metalink feature, and a user name and password are used to download the… Non notée 5 août 2021
CVE-2021-22922 When curl is instructed to download content using the metalink feature, thecontents is verified against a hash… 6.5 Moyenne 5 août 2021

Autres produits Siemens