Vulnérabilités connues pour Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2023-23914 | A cleartext transmission of sensitive information vulnerability exists in… | 9.1 Critique | 23 févr. 2023 |
| CVE-2023-23916 | An allocation of resources without limits or throttling vulnerability exists in… | 6.5 Moyenne | 23 févr. 2023 |
| CVE-2023-24329 | An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by… | 7.5 Élevée | 17 févr. 2023 |
| CVE-2023-0361 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS | 7.4 Élevée | 15 févr. 2023 |
| CVE-2022-43552 | A use after free vulnerability exists in curl <7.87.0 | 5.9 Moyenne | 9 févr. 2023 |
| CVE-2022-4304 | A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a… | Non notée | 8 févr. 2023 |
| CVE-2022-4450 | The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g | Non notée | 8 févr. 2023 |
| CVE-2023-0215 | The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO | Non notée | 8 févr. 2023 |
| CVE-2023-0286 | There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName | Non notée | 8 févr. 2023 |
| CVE-2023-0687 | A vulnerability was found in GNU C Library 2.38 | 4.6 Moyenne | 6 févr. 2023 |
| CVE-2023-25136 | OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling | Non notée | 3 févr. 2023 |
| CVE-2023-25139 | sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a… | 9.8 Critique | 3 févr. 2023 |
| CVE-2022-48303 | GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional… | 5.5 Moyenne | 30 janv. 2023 |
| CVE-2022-38773 | Affected devices do not contain an Immutable Root of Trust in Hardware | 4.6 Moyenne | 10 janv. 2023 |
| CVE-2022-3715 | A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform | 7.8 Élevée | 5 janv. 2023 |
| CVE-2022-42898 | PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to… | 8.8 Élevée | 25 déc. 2022 |
| CVE-2022-43551 | A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP | 7.5 Élevée | 23 déc. 2022 |
| CVE-2021-44694 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 5.5 Moyenne | 13 déc. 2022 |
| CVE-2021-44693 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Moyenne | 13 déc. 2022 |
| CVE-2021-44695 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 4.9 Moyenne | 13 déc. 2022 |
| CVE-2021-40365 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… | 7.5 Élevée | 13 déc. 2022 |
| CVE-2022-46908 | SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement… | 7.3 Élevée | 12 déc. 2022 |
| CVE-2022-35260 | curl can be told to parse a `.netrc` file for credentials | Non notée | 5 déc. 2022 |
| CVE-2022-32221 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data… | 9.8 Critique | 5 déc. 2022 |
| CVE-2022-45873 | systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long… | 5.5 Moyenne | 23 nov. 2022 |
Autres produits Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91