Aller au contenu

Vulnérabilités connues pour Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-23914 A cleartext transmission of sensitive information vulnerability exists in… 9.1 Critique 23 févr. 2023
CVE-2023-23916 An allocation of resources without limits or throttling vulnerability exists in… 6.5 Moyenne 23 févr. 2023
CVE-2023-24329 An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by… 7.5 Élevée 17 févr. 2023
CVE-2023-0361 A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS 7.4 Élevée 15 févr. 2023
CVE-2022-43552 A use after free vulnerability exists in curl <7.87.0 5.9 Moyenne 9 févr. 2023
CVE-2022-4304 A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a… Non notée 8 févr. 2023
CVE-2022-4450 The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g Non notée 8 févr. 2023
CVE-2023-0215 The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO Non notée 8 févr. 2023
CVE-2023-0286 There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName Non notée 8 févr. 2023
CVE-2023-0687 A vulnerability was found in GNU C Library 2.38 4.6 Moyenne 6 févr. 2023
CVE-2023-25136 OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling Non notée 3 févr. 2023
CVE-2023-25139 sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a… 9.8 Critique 3 févr. 2023
CVE-2022-48303 GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional… 5.5 Moyenne 30 janv. 2023
CVE-2022-38773 Affected devices do not contain an Immutable Root of Trust in Hardware 4.6 Moyenne 10 janv. 2023
CVE-2022-3715 A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform 7.8 Élevée 5 janv. 2023
CVE-2022-42898 PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to… 8.8 Élevée 25 déc. 2022
CVE-2022-43551 A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP 7.5 Élevée 23 déc. 2022
CVE-2021-44694 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 5.5 Moyenne 13 déc. 2022
CVE-2021-44693 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Moyenne 13 déc. 2022
CVE-2021-44695 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 4.9 Moyenne 13 déc. 2022
CVE-2021-40365 Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an… 7.5 Élevée 13 déc. 2022
CVE-2022-46908 SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement… 7.3 Élevée 12 déc. 2022
CVE-2022-35260 curl can be told to parse a `.netrc` file for credentials Non notée 5 déc. 2022
CVE-2022-32221 When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data… 9.8 Critique 5 déc. 2022
CVE-2022-45873 systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long… 5.5 Moyenne 23 nov. 2022

Autres produits Siemens