Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-28390 (GCVE-0-2022-28390)
Vulnerability from cvelistv5 – Published: 2022-04-03 20:07 – Updated: 2024-08-03 05:56
VLAI
EPSS
Summary
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://github.com/torvalds/linux/commit/c7022275… | x_refsource_MISC |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://www.debian.org/security/2022/dsa-5127 | vendor-advisoryx_refsource_DEBIAN |
| https://security.netapp.com/advisory/ntap-2022051… | x_refsource_CONFIRM |
| https://lists.debian.org/debian-lts-announce/2022… | mailing-listx_refsource_MLIST |
| https://www.debian.org/security/2022/dsa-5173 | vendor-advisoryx_refsource_DEBIAN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T05:56:15.238Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"name": "FEDORA-2022-af492757d9",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"name": "FEDORA-2022-5cd9d787dc",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"name": "FEDORA-2022-91633399ff",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"name": "DSA-5127",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"name": "DSA-5173",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2022/dsa-5173"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-04T10:11:58.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"name": "FEDORA-2022-af492757d9",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"name": "FEDORA-2022-5cd9d787dc",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"name": "FEDORA-2022-91633399ff",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"name": "DSA-5127",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"name": "DSA-5173",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2022/dsa-5173"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-28390",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646",
"refsource": "MISC",
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"name": "FEDORA-2022-af492757d9",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"name": "FEDORA-2022-5cd9d787dc",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"name": "FEDORA-2022-91633399ff",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"name": "DSA-5127",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220513-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"name": "DSA-5173",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2022/dsa-5173"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-28390",
"datePublished": "2022-04-03T20:07:21.000Z",
"dateReserved": "2022-04-03T00:00:00.000Z",
"dateUpdated": "2024-08-03T05:56:15.238Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-28390",
"date": "2026-05-31",
"epss": "0.00015",
"percentile": "0.03265"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-28390\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-04-03T21:15:08.163\",\"lastModified\":\"2025-06-25T21:00:27.730\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n ems_usb_start_xmit en el archivo drivers/net/can/usb/ems_usb.c en el kernel de Linux versiones hasta 5.17.1, presenta una doble liberaci\u00f3n\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.32\",\"versionEndIncluding\":\"5.17.1\",\"matchCriteriaId\":\"4A89AA7B-8B78-448B-A3BD-B74885A4BB13\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h300e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50E61C0A-01CA-4031-B4E0-D814E1D9CFCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27227B35-932A-4035-B39F-6A455753C0D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"489D20B9-166F-423D-8C48-A23D3026E33B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4AD592C-222D-4C6F-B176-8145A1A5AFEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h500e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8173DC0C-B9BB-4055-95B6-45EB08A3D923\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8603654B-A8A9-4DEB-B0DD-C82E1C885749\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h700e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14BCD5F2-E3FD-4877-8C93-5EF96008A287\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C855C933-F271-45E6-8E85-8D7CF2EF1BE6\"}]}]}],\"references\":[{\"url\":\"https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220513-0001/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5127\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5173\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220513-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5127\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5173\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTFR-2022-AVI-762
Vulnerability from certfr_avis - Published: 2022-08-23 - Updated: 2022-08-23
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Elles permettent à un attaquant de provoquer un déni de service et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server for SAP Applications versions antérieures à 15-SP4 | ||
| SUSE | N/A | SUSE Linux Enterprise Module for Live Patching versions antérieures à 15-SP4 | ||
| SUSE | SUSE Linux Enterprise High Performance Computing | SUSE Linux Enterprise High Performance Computing versions antérieures à 15-SP4 | ||
| SUSE | SUSE Linux Enterprise Server | SUSE Linux Enterprise Server versions antérieures à 15-SP4 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SUSE Linux Enterprise Server for SAP Applications versions ant\u00e9rieures \u00e0 15-SP4",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Module for Live Patching versions ant\u00e9rieures \u00e0 15-SP4",
"product": {
"name": "N/A",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise High Performance Computing versions ant\u00e9rieures \u00e0 15-SP4",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing",
"vendor": {
"name": "SUSE",
"scada": false
}
}
},
{
"description": "SUSE Linux Enterprise Server versions ant\u00e9rieures \u00e0 15-SP4",
"product": {
"name": "SUSE Linux Enterprise Server",
"vendor": {
"name": "SUSE",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-34918",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34918"
},
{
"name": "CVE-2022-1734",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1734"
},
{
"name": "CVE-2022-26490",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26490"
},
{
"name": "CVE-2022-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1679"
},
{
"name": "CVE-2022-28389",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28389"
},
{
"name": "CVE-2022-33743",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33743"
},
{
"name": "CVE-2022-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28390"
}
],
"initial_release_date": "2022-08-23T00:00:00",
"last_revision_date": "2022-08-23T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-762",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de\nSUSE. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de SUSE",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 SUSE suse-su-20222854-1 du 19 ao\u00fbt 2022",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/"
}
]
}
CERTFR-2023-AVI-0220
Vulnerability from certfr_avis - Published: 2023-03-14 - Updated: 2023-03-14
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SINEC NMS | ||
| Siemens | N/A | De nombreuses références SCALANCE et SIPROTEC (se référer aux bulletins de sécurité de l'éditeur pour les versions affectées) | ||
| Siemens | N/A | RUGGEDCOM CROSSBOW versions antérieures à V5.3 | ||
| Siemens | N/A | Mendix SAML (Mendix 9 compatible, New Track) versions 3.1.9 à 3.2.x antérieures à V3.3.0 | ||
| Siemens | N/A | Mendix SAML (Mendix 7 compatible) versions antérieures à V1.17.3 | ||
| Siemens | N/A | Mendix SAML (Mendix 8 compatible) versions antérieures à V2.3.0 | ||
| Siemens | N/A | SINEMA Server V14 | ||
| Siemens | N/A | Mendix SAML (Mendix 9 compatible, Upgrade Track) versions 3.1.9 à 3.2.x antérieures à V3.3.0 | ||
| Siemens | N/A | RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) et NAM (6GK6108-4AM00-2DA2) versions antérieures à V7.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SINEC NMS",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "De nombreuses r\u00e9f\u00e9rences SCALANCE et SIPROTEC (se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour les versions affect\u00e9es)",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM CROSSBOW versions ant\u00e9rieures \u00e0 V5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Mendix SAML (Mendix 9 compatible, New Track) versions 3.1.9 \u00e0 3.2.x ant\u00e9rieures \u00e0 V3.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Mendix SAML (Mendix 7 compatible) versions ant\u00e9rieures \u00e0 V1.17.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Mendix SAML (Mendix 8 compatible) versions ant\u00e9rieures \u00e0 V2.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SINEMA Server V14",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Mendix SAML (Mendix 9 compatible, Upgrade Track) versions 3.1.9 \u00e0 3.2.x ant\u00e9rieures \u00e0 V3.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) et NAM (6GK6108-4AM00-2DA2) versions ant\u00e9rieures \u00e0 V7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-1343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1343"
},
{
"name": "CVE-2019-1125",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1125"
},
{
"name": "CVE-2021-42384",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42384"
},
{
"name": "CVE-2022-35252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35252"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2021-42378",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42378"
},
{
"name": "CVE-2022-30594",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30594"
},
{
"name": "CVE-2021-42382",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42382"
},
{
"name": "CVE-2021-42376",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42376"
},
{
"name": "CVE-2022-24282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24282"
},
{
"name": "CVE-2019-1071",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1071"
},
{
"name": "CVE-2022-28356",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28356"
},
{
"name": "CVE-2022-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4304"
},
{
"name": "CVE-2018-12886",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12886"
},
{
"name": "CVE-2022-32208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32208"
},
{
"name": "CVE-2022-32296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32296"
},
{
"name": "CVE-2022-2380",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2380"
},
{
"name": "CVE-2021-42373",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42373"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2021-42377",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42377"
},
{
"name": "CVE-2022-1652",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1652"
},
{
"name": "CVE-2022-24281",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24281"
},
{
"name": "CVE-2022-23037",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23037"
},
{
"name": "CVE-2022-32207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32207"
},
{
"name": "CVE-2022-23395",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23395"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2022-23042",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23042"
},
{
"name": "CVE-2023-25957",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25957"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2021-42386",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42386"
},
{
"name": "CVE-2022-2639",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2639"
},
{
"name": "CVE-2021-42380",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42380"
},
{
"name": "CVE-2022-38767",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38767"
},
{
"name": "CVE-2021-42374",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42374"
},
{
"name": "CVE-2022-23036",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23036"
},
{
"name": "CVE-2022-0002",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0002"
},
{
"name": "CVE-2023-27462",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27462"
},
{
"name": "CVE-2022-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1016"
},
{
"name": "CVE-2022-1975",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1975"
},
{
"name": "CVE-2022-23038",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23038"
},
{
"name": "CVE-2023-27309",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27309"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2022-0494",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0494"
},
{
"name": "CVE-2021-42379",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42379"
},
{
"name": "CVE-2022-23039",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23039"
},
{
"name": "CVE-2021-42381",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42381"
},
{
"name": "CVE-2022-23040",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23040"
},
{
"name": "CVE-2022-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1304"
},
{
"name": "CVE-2022-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1011"
},
{
"name": "CVE-2021-26401",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26401"
},
{
"name": "CVE-2022-0547",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0547"
},
{
"name": "CVE-2021-42383",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42383"
},
{
"name": "CVE-2022-23041",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23041"
},
{
"name": "CVE-2022-1734",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1734"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2022-32205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32205"
},
{
"name": "CVE-2022-32981",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32981"
},
{
"name": "CVE-2022-26490",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26490"
},
{
"name": "CVE-2022-36946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36946"
},
{
"name": "CVE-2022-0001",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0001"
},
{
"name": "CVE-2021-42385",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42385"
},
{
"name": "CVE-2022-23308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23308"
},
{
"name": "CVE-2022-36879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36879"
},
{
"name": "CVE-2022-1353",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1353"
},
{
"name": "CVE-2022-2588",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2588"
},
{
"name": "CVE-2019-1073",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1073"
},
{
"name": "CVE-2022-32206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32206"
},
{
"name": "CVE-2022-1729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1729"
},
{
"name": "CVE-2021-4149",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4149"
},
{
"name": "CVE-2017-5715",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5715"
},
{
"name": "CVE-2022-1199",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1199"
},
{
"name": "CVE-2021-42375",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42375"
},
{
"name": "CVE-2021-4034",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4034"
},
{
"name": "CVE-2022-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28390"
},
{
"name": "CVE-2022-33981",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33981"
},
{
"name": "CVE-2022-1974",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1974"
},
{
"name": "CVE-2023-27310",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27310"
},
{
"name": "CVE-2022-30065",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30065"
},
{
"name": "CVE-2022-25311",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25311"
},
{
"name": "CVE-2022-1516",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1516"
},
{
"name": "CVE-2023-27463",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27463"
},
{
"name": "CVE-2022-1198",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1198"
},
{
"name": "CVE-2022-20158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-20158"
}
],
"initial_release_date": "2023-03-14T00:00:00",
"last_revision_date": "2023-03-14T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0220",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-03-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-419740 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-419740.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-320629 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-320629.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-250085 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-250085.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-203374 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-203374.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-851884 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-851884.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-565386 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-565386.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-260625 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-260625.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-726834 du 14 mars 2023",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-726834.html"
}
]
}
CERTFR-2023-AVI-0240
Vulnerability from certfr_avis - Published: 2023-03-17 - Updated: 2023-03-17
De multiples vulnérabilités ont été découvertes dans les produits IBM. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une exécution de code arbitraire à distance, un déni de service à distance, un contournement de la politique de sécurité, une élévation de privilèges et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | Sterling | Sterling Global Mailbox versions 6.0.3.x antérieures à 6.0.3.8 | ||
| IBM | Spectrum | Spectrum Copy Data Management versions 2.2.x antérieures à 2.2.19.0 | ||
| IBM | Spectrum | Spectrum Protect for Space Management versions 8.1.x antérieures à 8.1.17.2 | ||
| IBM | Sterling | Sterling B2B Integrator versions 6.1.x antérieures à 6.1.2.1 | ||
| IBM | Spectrum | Spectrum Protect Plus versions 10.1.x antérieures à 10.1.14 | ||
| IBM | Spectrum | Spectrum Protect Client versions 8.1.x antérieures à 8.1.17.2 | ||
| IBM | Sterling | Sterling Global Mailbox versions 6.1.2.x antérieures à 6.1.2.2 | ||
| IBM | Sterling | Sterling B2B Integrator versions 6.0.x antérieures à 6.0.3.8 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Sterling Global Mailbox versions 6.0.3.x ant\u00e9rieures \u00e0 6.0.3.8",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Spectrum Copy Data Management versions 2.2.x ant\u00e9rieures \u00e0 2.2.19.0",
"product": {
"name": "Spectrum",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Spectrum Protect for Space Management versions 8.1.x ant\u00e9rieures \u00e0 8.1.17.2",
"product": {
"name": "Spectrum",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator versions 6.1.x ant\u00e9rieures \u00e0 6.1.2.1",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Spectrum Protect Plus versions 10.1.x ant\u00e9rieures \u00e0 10.1.14",
"product": {
"name": "Spectrum",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Spectrum Protect Client versions 8.1.x ant\u00e9rieures \u00e0 8.1.17.2",
"product": {
"name": "Spectrum",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Global Mailbox versions 6.1.2.x ant\u00e9rieures \u00e0 6.1.2.2",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling B2B Integrator versions 6.0.x ant\u00e9rieures \u00e0 6.0.3.8",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-29581",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29581"
},
{
"name": "CVE-2022-31129",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31129"
},
{
"name": "CVE-2023-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
},
{
"name": "CVE-2022-2964",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2964"
},
{
"name": "CVE-2022-4379",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4379"
},
{
"name": "CVE-2023-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
},
{
"name": "CVE-2020-36557",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36557"
},
{
"name": "CVE-2022-2639",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2639"
},
{
"name": "CVE-2022-2601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2601"
},
{
"name": "CVE-2022-0168",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0168"
},
{
"name": "CVE-2015-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7501"
},
{
"name": "CVE-2022-29244",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29244"
},
{
"name": "CVE-2022-3509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3509"
},
{
"name": "CVE-2022-46364",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46364"
},
{
"name": "CVE-2022-2078",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2078"
},
{
"name": "CVE-2022-1184",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1184"
},
{
"name": "CVE-2022-2586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2586"
},
{
"name": "CVE-2022-0494",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0494"
},
{
"name": "CVE-2021-3807",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3807"
},
{
"name": "CVE-2022-46363",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46363"
},
{
"name": "CVE-2022-41717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41717"
},
{
"name": "CVE-2022-3517",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3517"
},
{
"name": "CVE-2022-24785",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24785"
},
{
"name": "CVE-2021-3640",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3640"
},
{
"name": "CVE-2023-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21835"
},
{
"name": "CVE-2022-36946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36946"
},
{
"name": "CVE-2022-24448",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24448"
},
{
"name": "CVE-2022-1055",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1055"
},
{
"name": "CVE-2022-1353",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1353"
},
{
"name": "CVE-2022-42436",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42436"
},
{
"name": "CVE-2022-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28390"
},
{
"name": "CVE-2022-3171",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3171"
},
{
"name": "CVE-2020-36558",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36558"
}
],
"initial_release_date": "2023-03-17T00:00:00",
"last_revision_date": "2023-03-17T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0240",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-03-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits \u003cspan\nclass=\"textit\"\u003eIBM\u003c/span\u003e. Elles permettent \u00e0 un attaquant de provoquer\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963960",
"url": "https://www.ibm.com/support/pages/node/6963960"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963958",
"url": "https://www.ibm.com/support/pages/node/6963958"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963962",
"url": "https://www.ibm.com/support/pages/node/6963962"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963936",
"url": "https://www.ibm.com/support/pages/node/6963936"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963956",
"url": "https://www.ibm.com/support/pages/node/6963956"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6960747",
"url": "https://www.ibm.com/support/pages/node/6960747"
},
{
"published_at": "2023-03-17",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6956237",
"url": "https://www.ibm.com/support/pages/node/6956237"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6960739",
"url": "https://www.ibm.com/support/pages/node/6960739"
},
{
"published_at": "2023-03-16",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6963954",
"url": "https://www.ibm.com/support/pages/node/6963954"
}
]
}
CERTFR-2024-AVI-0115
Vulnerability from certfr_avis - Published: 2024-02-09 - Updated: 2024-02-09
De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux Server | Red Hat Enterprise Linux Server - AUS 8.6 x86_64 | ||
| Red Hat | Red Hat Enterprise Linux Server | Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for Real Time for x86_64 - 4 years of updates 9.2 x86_64 | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64 | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le | ||
| Red Hat | Red Hat Enterprise Linux Server | Red Hat Enterprise Linux Server - TUS 8.6 x86_64 | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x | ||
| Red Hat | Red Hat CodeReady Linux Builder | Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6 aarch64 | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for Real Time for NFV for x86_64 - 4 years of updates 9.2 x86_64 | ||
| Red Hat | Red Hat CodeReady Linux Builder | Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6 x86_64 | ||
| Oracle | Virtualization | Red Hat Virtualization Host 4 for RHEL 8 x86_64 | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64 | ||
| Red Hat | Red Hat CodeReady Linux Builder | Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6 ppc64le | ||
| Red Hat | Red Hat Enterprise Linux | Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Red Hat Enterprise Linux Server - AUS 8.6 x86_64",
"product": {
"name": "Red Hat Enterprise Linux Server",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le",
"product": {
"name": "Red Hat Enterprise Linux Server",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for Real Time for x86_64 - 4 years of updates 9.2 x86_64",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux Server - TUS 8.6 x86_64",
"product": {
"name": "Red Hat Enterprise Linux Server",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6 aarch64",
"product": {
"name": "Red Hat CodeReady Linux Builder",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for Real Time for NFV for x86_64 - 4 years of updates 9.2 x86_64",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6 x86_64",
"product": {
"name": "Red Hat CodeReady Linux Builder",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Virtualization Host 4 for RHEL 8 x86_64",
"product": {
"name": "Virtualization",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6 ppc64le",
"product": {
"name": "Red Hat CodeReady Linux Builder",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
},
{
"description": "Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64",
"product": {
"name": "Red Hat Enterprise Linux",
"vendor": {
"name": "Red Hat",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-3707",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3707"
},
{
"name": "CVE-2023-46813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46813"
},
{
"name": "CVE-2023-28328",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28328"
},
{
"name": "CVE-2023-6536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6536"
},
{
"name": "CVE-2021-30002",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30002"
},
{
"name": "CVE-2023-23455",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23455"
},
{
"name": "CVE-2024-0646",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0646"
},
{
"name": "CVE-2023-40283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40283"
},
{
"name": "CVE-2022-39189",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39189"
},
{
"name": "CVE-2022-0168",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0168"
},
{
"name": "CVE-2023-45862",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45862"
},
{
"name": "CVE-2023-1989",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1989"
},
{
"name": "CVE-2023-20569",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20569"
},
{
"name": "CVE-2023-6817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6817"
},
{
"name": "CVE-2023-1074",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1074"
},
{
"name": "CVE-2023-4921",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4921"
},
{
"name": "CVE-2022-21499",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21499"
},
{
"name": "CVE-2022-1462",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1462"
},
{
"name": "CVE-2023-6356",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6356"
},
{
"name": "CVE-2022-2078",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2078"
},
{
"name": "CVE-2023-1252",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1252"
},
{
"name": "CVE-2022-2663",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2663"
},
{
"name": "CVE-2022-2586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2586"
},
{
"name": "CVE-2022-28893",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28893"
},
{
"name": "CVE-2022-3545",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3545"
},
{
"name": "CVE-2023-2176",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2176"
},
{
"name": "CVE-2022-3524",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3524"
},
{
"name": "CVE-2023-28772",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28772"
},
{
"name": "CVE-2023-1075",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1075"
},
{
"name": "CVE-2021-3640",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3640"
},
{
"name": "CVE-2022-45887",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45887"
},
{
"name": "CVE-2023-6535",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6535"
},
{
"name": "CVE-2022-0500",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0500"
},
{
"name": "CVE-2022-3594",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3594"
},
{
"name": "CVE-2022-36946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36946"
},
{
"name": "CVE-2022-24448",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24448"
},
{
"name": "CVE-2022-3619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3619"
},
{
"name": "CVE-2023-35825",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35825"
},
{
"name": "CVE-2022-25265",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25265"
},
{
"name": "CVE-2023-3141",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3141"
},
{
"name": "CVE-2021-4204",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4204"
},
{
"name": "CVE-2022-28388",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28388"
},
{
"name": "CVE-2023-6606",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6606"
},
{
"name": "CVE-2022-3623",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3623"
},
{
"name": "CVE-2023-6932",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6932"
},
{
"name": "CVE-2023-0458",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0458"
},
{
"name": "CVE-2022-0617",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0617"
},
{
"name": "CVE-2021-34866",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34866"
},
{
"name": "CVE-2023-7192",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7192"
},
{
"name": "CVE-2023-4132",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4132"
},
{
"name": "CVE-2022-3566",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3566"
},
{
"name": "CVE-2022-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28390"
},
{
"name": "CVE-2023-5717",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5717"
},
{
"name": "CVE-2022-23222",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23222"
},
{
"name": "CVE-2023-2166",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2166"
},
{
"name": "CVE-2023-6610",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6610"
}
],
"initial_release_date": "2024-02-09T00:00:00",
"last_revision_date": "2024-02-09T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0115",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-02-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
},
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003ele noyau Linux de RedHat\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code arbitraire et un d\u00e9ni de\nservice \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de RedHat",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:0724 du 07 f\u00e9vrier 2024",
"url": "https://access.redhat.com/errata/RHSA-2024:0724"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2024:0725 du 07 f\u00e9vrier 2024",
"url": "https://access.redhat.com/errata/RHSA-2024:0725"
}
]
}
FKIE_CVE-2022-28390
Vulnerability from fkie_nvd - Published: 2022-04-03 21:15 - Updated: 2025-06-25 21:00
Severity
Summary
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| linux | linux_kernel | * | |
| fedoraproject | fedora | 34 | |
| fedoraproject | fedora | 35 | |
| fedoraproject | fedora | 36 | |
| debian | debian_linux | 9.0 | |
| debian | debian_linux | 10.0 | |
| debian | debian_linux | 11.0 | |
| netapp | hci_baseboard_management_controller | h300e | |
| netapp | hci_baseboard_management_controller | h300s | |
| netapp | hci_baseboard_management_controller | h410c | |
| netapp | hci_baseboard_management_controller | h410s | |
| netapp | hci_baseboard_management_controller | h500e | |
| netapp | hci_baseboard_management_controller | h500s | |
| netapp | hci_baseboard_management_controller | h700e | |
| netapp | hci_baseboard_management_controller | h700s |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4A89AA7B-8B78-448B-A3BD-B74885A4BB13",
"versionEndIncluding": "5.17.1",
"versionStartIncluding": "2.6.32",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300e:*:*:*:*:*:*:*",
"matchCriteriaId": "50E61C0A-01CA-4031-B4E0-D814E1D9CFCC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
"matchCriteriaId": "27227B35-932A-4035-B39F-6A455753C0D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
"matchCriteriaId": "489D20B9-166F-423D-8C48-A23D3026E33B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
"matchCriteriaId": "A4AD592C-222D-4C6F-B176-8145A1A5AFEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500e:*:*:*:*:*:*:*",
"matchCriteriaId": "8173DC0C-B9BB-4055-95B6-45EB08A3D923",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
"matchCriteriaId": "8603654B-A8A9-4DEB-B0DD-C82E1C885749",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700e:*:*:*:*:*:*:*",
"matchCriteriaId": "14BCD5F2-E3FD-4877-8C93-5EF96008A287",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
"matchCriteriaId": "C855C933-F271-45E6-8E85-8D7CF2EF1BE6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
},
{
"lang": "es",
"value": "La funci\u00f3n ems_usb_start_xmit en el archivo drivers/net/can/usb/ems_usb.c en el kernel de Linux versiones hasta 5.17.1, presenta una doble liberaci\u00f3n"
}
],
"id": "CVE-2022-28390",
"lastModified": "2025-06-25T21:00:27.730",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-04-03T21:15:08.163",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5173"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5173"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-415"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-HGF7-47F3-2GQ3
Vulnerability from github – Published: 2022-04-04 00:00 – Updated: 2025-06-25 21:30
VLAI
Details
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2022-28390"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-04-03T21:15:00Z",
"severity": "HIGH"
},
"details": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.",
"id": "GHSA-hgf7-47f3-2gq3",
"modified": "2025-06-25T21:30:31Z",
"published": "2022-04-04T00:00:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28390"
},
{
"type": "WEB",
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20220513-0001"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2022/dsa-5173"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2022-28390
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-28390",
"description": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.",
"id": "GSD-2022-28390",
"references": [
"https://www.suse.com/security/cve/CVE-2022-28390.html",
"https://advisories.mageia.org/CVE-2022-28390.html",
"https://alas.aws.amazon.com/cve/html/CVE-2022-28390.html",
"https://security.archlinux.org/CVE-2022-28390",
"https://www.debian.org/security/2022/dsa-5127",
"https://ubuntu.com/security/CVE-2022-28390",
"https://www.debian.org/security/2022/dsa-5173",
"https://access.redhat.com/errata/RHSA-2022:7444",
"https://access.redhat.com/errata/RHSA-2022:7683",
"https://access.redhat.com/errata/RHSA-2022:7933",
"https://access.redhat.com/errata/RHSA-2022:8267"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-28390"
],
"details": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.",
"id": "GSD-2022-28390",
"modified": "2023-12-13T01:19:34.545830Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-28390",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646",
"refsource": "MISC",
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"name": "FEDORA-2022-af492757d9",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"name": "FEDORA-2022-5cd9d787dc",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"name": "FEDORA-2022-91633399ff",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"name": "DSA-5127",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220513-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"name": "DSA-5173",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2022/dsa-5173"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "5.17.1",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300e:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500e:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700e:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-28390"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-415"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646"
},
{
"name": "FEDORA-2022-af492757d9",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/"
},
{
"name": "FEDORA-2022-5cd9d787dc",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/"
},
{
"name": "FEDORA-2022-91633399ff",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/"
},
{
"name": "DSA-5127",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5127"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220513-0001/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220513-0001/"
},
{
"name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"name": "DSA-5173",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2022/dsa-5173"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-02-01T15:11Z",
"publishedDate": "2022-04-03T21:15Z"
}
}
}
ICSA-23-075-01
Vulnerability from csaf_cisa - Published: 2023-03-14 00:00 - Updated: 2023-03-14 00:00Summary
Siemens SCALANCE, RUGGEDCOM Third-Party
Notes
Summary: Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer: This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors: Multiple
Countries/areas deployed: Worldwide
Company headquarters location: Germany
Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
CWE-787
- Out-of-bounds Write
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-667
- Improper Locking
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-763
- Release of Invalid Pointer or Reference
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-295
- Improper Certificate Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-404
- Improper Resource Shutdown or Release
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-248
- Uncaught Exception
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-191
- Integer Underflow (Wrap or Wraparound)
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-120
- Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-415
- Double Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-863
- Incorrect Authorization
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-770
- Allocation of Resources Without Limits or Throttling
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-770
- Allocation of Resources Without Limits or Throttling
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-203
- Observable Discrepancy
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-120
- Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-1286
- Improper Validation of Syntactic Correctness of Input
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
6GK6108-4AM00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
6GK6108-4AM00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M804PB (6GK5804-0AP00-2AA2)
Siemens / SCALANCE M804PB (6GK5804-0AP00-2AA2)
|
6GK5804-0AP00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
|
6GK5812-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Siemens / SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
|
6GK5812-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
|
6GK5816-1AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Siemens / SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
|
6GK5816-1BA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Siemens / SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
|
6GK5826-2AB00-2AB2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-2 (6GK5874-2AA00-2AA2)
Siemens / SCALANCE M874-2 (6GK5874-2AA00-2AA2)
|
6GK5874-2AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M874-3 (6GK5874-3AA00-2AA2)
Siemens / SCALANCE M874-3 (6GK5874-3AA00-2AA2)
|
6GK5874-3AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Siemens / SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
|
6GK5876-3AA02-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Siemens / SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
|
6GK5876-3AA02-2EA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (6GK5876-4AA10-2BA2)
Siemens / SCALANCE M876-4 (6GK5876-4AA10-2BA2)
|
6GK5876-4AA10-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Siemens / SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
|
6GK5876-4AA00-2BA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Siemens / SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
|
6GK5876-4AA00-2DA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Siemens / SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
|
6GK5853-2EA00-2DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Siemens / SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
|
6GK5856-2EA00-3DA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Siemens / SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
|
6GK5856-2EA00-3AA1
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 (6GK5615-0AA00-2AA2)
Siemens / SCALANCE S615 (6GK5615-0AA00-2AA2)
|
6GK5615-0AA00-2AA2
|
<V7.2 |
Vendor Fix
fix
|
|
SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
Siemens / SCALANCE S615 EEC (6GK5615-0AA01-2AA2)
|
6GK5615-0AA01-2AA2
|
<V7.2 |
Vendor Fix
fix
|
References
11 references
Acknowledgments
Siemens ProductCERT
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting these vulnerabilities to CISA."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-419740: Multiple\tThird-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-419740.json"
},
{
"category": "self",
"summary": "SSA-419740: Multiple\tThird-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-419740.txt"
},
{
"category": "self",
"summary": "SSA-419740: Multiple\tThird-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-419740.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-23-075-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-075-01.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-23-075-01 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SCALANCE, RUGGEDCOM Third-Party",
"tracking": {
"current_release_date": "2023-03-14T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-23-075-01",
"initial_release_date": "2023-03-14T00:00:00.000000Z",
"revision_history": [
{
"date": "2023-03-14T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"6GK6108-4AM00-2BA2"
]
}
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"6GK6108-4AM00-2DA2"
]
}
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M804PB (6GK5804-0AP00-2AA2)",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"6GK5804-0AP00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M804PB (6GK5804-0AP00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"6GK5812-1AA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"6GK5812-1BA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"6GK5816-1AA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"6GK5816-1BA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"6GK5826-2AB00-2AB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M874-2 (6GK5874-2AA00-2AA2)",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"6GK5874-2AA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M874-2 (6GK5874-2AA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M874-3 (6GK5874-3AA00-2AA2)",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"6GK5874-3AA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M874-3 (6GK5874-3AA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"6GK5876-3AA02-2BA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"6GK5876-3AA02-2EA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M876-4 (6GK5876-4AA10-2BA2)",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"6GK5876-4AA10-2BA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M876-4 (6GK5876-4AA10-2BA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"6GK5876-4AA00-2BA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"6GK5876-4AA00-2DA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"6GK5853-2EA00-2DA1"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"model_numbers": [
"6GK5856-2EA00-3DA1"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"model_numbers": [
"6GK5856-2EA00-3AA1"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE S615 (6GK5615-0AA00-2AA2)",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"model_numbers": [
"6GK5615-0AA00-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE S615 (6GK5615-0AA00-2AA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV7.2",
"product": {
"name": "SCALANCE S615 EEC (6GK5615-0AA01-2AA2)",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"model_numbers": [
"6GK5615-0AA01-2AA2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE S615 EEC (6GK5615-0AA01-2AA2)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-25032",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2018-25032"
},
{
"cve": "CVE-2019-1125",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka \u0027Windows Kernel Information Disclosure Vulnerability\u0027. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2019-1125"
},
{
"cve": "CVE-2021-4034",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A local privilege escalation vulnerability was found on polkit\u0027s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn\u0027t handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it\u0027ll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-4034"
},
{
"cve": "CVE-2021-4149",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-4149"
},
{
"cve": "CVE-2021-26401",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-26401"
},
{
"cve": "CVE-2021-42373",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference in Busybox\u0027s man applet leads to denial of service when a section name is supplied but no page argument is given.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42373"
},
{
"cve": "CVE-2021-42374",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds heap read in Busybox\u0027s unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that internally supports LZMA compression.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42374"
},
{
"cve": "CVE-2021-42375",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An incorrect handling of a special element in Busybox\u0027s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42375"
},
{
"cve": "CVE-2021-42376",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference in Busybox\u0027s hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \\x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42376"
},
{
"cve": "CVE-2021-42377",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"notes": [
{
"category": "summary",
"text": "An attacker-controlled pointer free in Busybox\u0027s hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the \u0026\u0026\u0026 string. This may be used for remote code execution under rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42377"
},
{
"cve": "CVE-2021-42378",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42378"
},
{
"cve": "CVE-2021-42379",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42379"
},
{
"cve": "CVE-2021-42380",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42380"
},
{
"cve": "CVE-2021-42381",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42381"
},
{
"cve": "CVE-2021-42382",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42382"
},
{
"cve": "CVE-2021-42383",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42383"
},
{
"cve": "CVE-2021-42384",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42384"
},
{
"cve": "CVE-2021-42385",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42385"
},
{
"cve": "CVE-2021-42386",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2021-42386"
},
{
"cve": "CVE-2022-0001",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-0001"
},
{
"cve": "CVE-2022-0002",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-0002"
},
{
"cve": "CVE-2022-0494",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-0494"
},
{
"cve": "CVE-2022-0547",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-0547"
},
{
"cve": "CVE-2022-1011",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in the Linux kernel\u2019s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1011"
},
{
"cve": "CVE-2022-1016",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle \u0027return\u0027 with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1016"
},
{
"cve": "CVE-2022-1198",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1198"
},
{
"cve": "CVE-2022-1199",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1199"
},
{
"cve": "CVE-2022-1292",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1292"
},
{
"cve": "CVE-2022-1304",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1304"
},
{
"cve": "CVE-2022-1343",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "Under certain circumstances, the command line OCSP verify function reports successful verification when the varification in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1343"
},
{
"cve": "CVE-2022-1353",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1353"
},
{
"cve": "CVE-2022-1473",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "summary",
"text": "The used OpenSSL version improperly reuses memory when decoding certificates or keys. This can lead to a process termination and Denial of Service for long lived processes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1473"
},
{
"cve": "CVE-2022-1516",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference flaw was found in the Linux kernel\u2019s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1516"
},
{
"cve": "CVE-2022-1652",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1652"
},
{
"cve": "CVE-2022-1729",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1729"
},
{
"cve": "CVE-2022-1734",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1734"
},
{
"cve": "CVE-2022-1974",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1974"
},
{
"cve": "CVE-2022-1975",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "summary",
"text": "There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-1975"
},
{
"cve": "CVE-2022-2380",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-2380"
},
{
"cve": "CVE-2022-2588",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-2588"
},
{
"cve": "CVE-2022-2639",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "summary",
"text": "An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-2639"
},
{
"cve": "CVE-2022-20158",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182815710References: Upstream kernel",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-20158"
},
{
"cve": "CVE-2022-23036",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23036"
},
{
"cve": "CVE-2022-23037",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23037"
},
{
"cve": "CVE-2022-23038",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23038"
},
{
"cve": "CVE-2022-23039",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23039"
},
{
"cve": "CVE-2022-23040",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23040"
},
{
"cve": "CVE-2022-23041",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23041"
},
{
"cve": "CVE-2022-23042",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Linux PV device frontends vulnerable to attacks by backends [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn\u0027t check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23042"
},
{
"cve": "CVE-2022-23308",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-23308"
},
{
"cve": "CVE-2022-26490",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-26490"
},
{
"cve": "CVE-2022-28356",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-28356"
},
{
"cve": "CVE-2022-28390",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-28390"
},
{
"cve": "CVE-2022-30065",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox 1.35-x\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-30065"
},
{
"cve": "CVE-2022-30594",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-30594"
},
{
"cve": "CVE-2022-32205",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "A malicious server can serve excessive amounts of \"Set-Cookie:\" headers in a HTTP response to curl and curl \u003c 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven\u0027t expired. Due to cookie matching rules, a server on \"foo.example.com\" can set cookies that also would match for \"bar.example.com\", making it it possible for a \"sister server\" to effectively cause a denial of service for a sibling site on the same second level domain using this method.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32205"
},
{
"cve": "CVE-2022-32206",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "curl \u003c 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32206"
},
{
"cve": "CVE-2022-32207",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "summary",
"text": "When curl \u003c 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32207"
},
{
"cve": "CVE-2022-32208",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "When curl \u003c 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32208"
},
{
"cve": "CVE-2022-32296",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 (\"Double-Hash Port Selection Algorithm\") of RFC 6056.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32296"
},
{
"cve": "CVE-2022-32981",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-32981"
},
{
"cve": "CVE-2022-33981",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-33981"
},
{
"cve": "CVE-2022-35252",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"notes": [
{
"category": "summary",
"text": "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-35252"
},
{
"cve": "CVE-2022-36879",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-36879"
},
{
"cve": "CVE-2022-36946",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-\u003elen.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.2 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
],
"url": "https://support.industry.siemens.com/cs/document/109817007/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020"
]
}
],
"title": "CVE-2022-36946"
}
]
}
MSRC_CVE-2022-28390
Vulnerability from csaf_microsoft - Published: 2022-04-02 00:00 - Updated: 2022-04-10 00:00Summary
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 18454-16820 | — | ||
| Unresolved product id: 18720-17086 | — |
References
4 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2022/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2022/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2022-28390 ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-28390.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.",
"tracking": {
"current_release_date": "2022-04-10T00:00:00.000Z",
"generator": {
"date": "2025-12-27T17:57:40.039Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2022-28390",
"initial_release_date": "2022-04-02T00:00:00.000Z",
"revision_history": [
{
"date": "2022-04-10T00:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1.0",
"product": {
"name": "CBL Mariner 1.0",
"product_id": "16820"
}
},
{
"category": "product_version",
"name": "2.0",
"product": {
"name": "CBL Mariner 2.0",
"product_id": "17086"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003ccm1 kernel 5.10.111.1-1",
"product": {
"name": "\u003ccm1 kernel 5.10.111.1-1",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "cm1 kernel 5.10.111.1-1",
"product": {
"name": "cm1 kernel 5.10.111.1-1",
"product_id": "18454"
}
},
{
"category": "product_version_range",
"name": "\u003ccbl2 kernel 5.15.37.1-2",
"product": {
"name": "\u003ccbl2 kernel 5.15.37.1-2",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "cbl2 kernel 5.15.37.1-2",
"product": {
"name": "cbl2 kernel 5.15.37.1-2",
"product_id": "18720"
}
}
],
"category": "product_name",
"name": "kernel"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccm1 kernel 5.10.111.1-1 as a component of CBL Mariner 1.0",
"product_id": "16820-2"
},
"product_reference": "2",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cm1 kernel 5.10.111.1-1 as a component of CBL Mariner 1.0",
"product_id": "18454-16820"
},
"product_reference": "18454",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccbl2 kernel 5.15.37.1-2 as a component of CBL Mariner 2.0",
"product_id": "17086-1"
},
"product_reference": "1",
"relates_to_product_reference": "17086"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cbl2 kernel 5.15.37.1-2 as a component of CBL Mariner 2.0",
"product_id": "18720-17086"
},
"product_reference": "18720",
"relates_to_product_reference": "17086"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-28390",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "general",
"text": "mitre",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"18454-16820",
"18720-17086"
],
"known_affected": [
"16820-2",
"17086-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-28390 ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-28390.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2022-04-10T00:00:00.000Z",
"details": "-:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"16820-2"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
},
{
"category": "vendor_fix",
"date": "2022-04-10T00:00:00.000Z",
"details": "5.15.37.1-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17086-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"16820-2",
"17086-1"
]
}
],
"title": "ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free."
}
]
}
NCSC-2025-0382
Vulnerability from csaf_ncscnl - Published: 2025-12-09 13:15 - Updated: 2025-12-09 13:15Summary
Kwetsbaarheden verholpen in Siemens producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
Interpretaties: De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- (Remote) code execution (root/admin rechten)
- Toegang tot systeemgegevens
- Toegang tot gevoelige gegevens
- Verhogen van rechten
De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen: Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-126: Buffer Over-read
CWE-129: Improper Validation of Array Index
CWE-141: Improper Neutralization of Parameter/Argument Delimiters
CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
CWE-178: Improper Handling of Case Sensitivity
CWE-190: Integer Overflow or Wraparound
CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-192: Integer Coercion Error
CWE-193: Off-by-one Error
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-201: Insertion of Sensitive Information Into Sent Data
CWE-203: Observable Discrepancy
CWE-204: Observable Response Discrepancy
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
CWE-264: CWE-264
CWE-268: Privilege Chaining
CWE-271: Privilege Dropping / Lowering Errors
CWE-276: Incorrect Default Permissions
CWE-281: Improper Preservation of Permissions
CWE-284: Improper Access Control
CWE-285: Improper Authorization
CWE-287: Improper Authentication
CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-294: Authentication Bypass by Capture-replay
CWE-295: Improper Certificate Validation
CWE-303: Incorrect Implementation of Authentication Algorithm
CWE-306: Missing Authentication for Critical Function
CWE-310: CWE-310
CWE-311: Missing Encryption of Sensitive Data
CWE-319: Cleartext Transmission of Sensitive Information
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-328: Use of Weak Hash
CWE-340: Generation of Predictable Numbers or Identifiers
CWE-347: Improper Verification of Cryptographic Signature
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-354: Improper Validation of Integrity Check Value
CWE-358: Improperly Implemented Security Check for Standard
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-384: Session Fixation
CWE-385: Covert Timing Channel
CWE-399: CWE-399
CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-407: Inefficient Algorithmic Complexity
CWE-414: Missing Lock Check
CWE-415: Double Free
CWE-416: Use After Free
CWE-440: Expected Behavior Violation
CWE-476: NULL Pointer Dereference
CWE-502: Deserialization of Untrusted Data
CWE-665: Improper Initialization
CWE-667: Improper Locking
CWE-668: Exposure of Resource to Wrong Sphere
CWE-681: Incorrect Conversion between Numeric Types
CWE-732: Incorrect Permission Assignment for Critical Resource
CWE-754: Improper Check for Unusual or Exceptional Conditions
CWE-763: Release of Invalid Pointer or Reference
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-787: Out-of-bounds Write
CWE-798: Use of Hard-coded Credentials
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-862: Missing Authorization
CWE-863: Incorrect Authorization
CWE-909: Missing Initialization of Resource
CWE-918: Server-Side Request Forgery (SSRF)
CWE-940: Improper Verification of Source of a Communication Channel
CWE-1214: CWE-1214
CWE-1287: Improper Validation of Specified Type of Input
CWE-1333: Inefficient Regular Expression Complexity
A vulnerability in shadow 4.5's newgidmap allows unprivileged users to exploit user namespaces, potentially bypassing access restrictions set by administrators.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GnuPG versions 2.2.4 and 2.2.5 have a vulnerability (CVE-2018-9234) that allows remote attackers to bypass security restrictions by using a signing subkey for key certification without enforcing the offline master Certify key.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The 'remember_Ktype' function in cplus-dem.c of GNU libiberty, present in GNU Binutils 2.30, is susceptible to excessive memory consumption, which may result in out-of-memory conditions during cxxfilt execution.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The libseccomp 2.4.1 update resolves a BPF generation bug, enhances syscall tables, addresses CVE-2019-9893, and improves support for various architectures while fixing prior 64-bit syscall argument comparison issues.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The updates for ClamAV version 0.103.0 and bzip2 address multiple security vulnerabilities, including non-blocking database reloads in ClamAV and out-of-bounds writes in bzip2, enhancing overall functionality and security.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Versions of cpio prior to 2.13 have a vulnerability due to improper input validation when generating TAR archives, allowing unauthorized file permissions and paths that could compromise systems upon extraction by high-privilege users.
7.3 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and its components, including json-c and libfastjson, have multiple vulnerabilities, particularly an integer overflow and out-of-bounds write issue (CVE-2020-12762) affecting large JSON files, allowing potential arbitrary code execution.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The libcpu component of elfutils version 0.177 has a denial-of-service vulnerability that can be exploited by attackers through specially crafted ELF files, leading to application crashes.
5.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
C-ares versions before 1.16.1 and up to 1.17.0 have a buffer overflow vulnerability in the ares_parse_soa_reply function, addressed by the libcares2 update for CVE-2020-22217.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A NULL pointer dereference vulnerability in SQLite 3.31.1 can cause out-of-memory errors during INTERSECT query processing, potentially leading to Denial of Service attacks in affected NetApp products.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities related to TLS ciphers, memory allocation, and keystore corruption, while Oracle Java SE and GraalVM have critical vulnerabilities allowing unauthorized access to sensitive data.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as memory allocation issues and weak cipher preferences, while also enhancing functionalities and updating to newer service refreshes.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK and Oracle Java SE address multiple vulnerabilities, including weak TLS ciphers, excessive memory allocations, and denial of service risks across various versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for IBM and OpenJDK Java versions address various vulnerabilities, including excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several releases.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Java, including OpenJDK and Oracle Java SE, address multiple vulnerabilities related to memory allocation, TLS issues, and unauthorized access, with CVSS scores indicating significant risks.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Java SE, OpenJDK, and Oracle GraalVM address multiple vulnerabilities, including memory allocation issues, weak TLS ciphers, and denial of service risks, affecting various supported versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for IBM Java and OpenJDK address multiple vulnerabilities, including memory allocation issues and weak cipher preferences, while also enhancing versions to Java 7.1 SR5, Java 8.0 SR7, and OpenJDK 8u312 and 7u321.
CWE-20 - Improper Input ValidationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities, including TLS cipher issues and memory allocation problems, while Oracle Java SE and GraalVM Enterprise Edition have vulnerabilities that could compromise data confidentiality.
CWE-203 - Observable DiscrepancyAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including use-after-free and Denial of Service risks, potentially allowing attackers to execute arbitrary code or cause service disruptions.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and products, particularly those utilizing SELinux.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution, affecting various components and requiring user interaction or elevated privileges for exploitation.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and requiring user interaction or elevated privileges for exploitation.
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GNU cpio version 2.13 is vulnerable to remote code execution due to an integer overflow in the ds_fgetstr function when processing specially crafted pattern files.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks and use-after-free issues, across various kernel versions and components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 12 and 15 SP5 kernels, including RT and Azure variants, were updated to address multiple security vulnerabilities such as memory leaks and use-after-free issues, enhancing overall system security.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels and Linux Kernel versions have been updated to address multiple security vulnerabilities, including memory corruption, race conditions, and remote stack overflow issues, alongside various non-security bug fixes.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple security vulnerabilities, including privilege escalation, memory corruption, and transient execution side-channel attacks across several service packs.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including privilege escalation and memory access issues, alongside mitigations for transient execution side-channel attacks.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) were updated to address various security vulnerabilities, including memory leaks, use-after-free, double free issues, and information leak flaws.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates were released for SUSE Linux Enterprise kernels addressing various security vulnerabilities and non-security bugs, including memory management issues, privilege escalation risks, and access control flaws.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across multiple versions have been updated to address various security vulnerabilities, including RETBLEED, use-after-free issues, and non-security bug fixes, enhancing overall system stability.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernel updates across various versions address multiple security vulnerabilities, including race conditions, use-after-free issues, and denial of service, alongside non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels addressed multiple security vulnerabilities, including use-after-free and memory corruption issues, across several versions and components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple critical security vulnerabilities, including use-after-free and memory corruption issues, across several components and drivers.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across SUSE Linux Enterprise and Linux Kernel versions addressed various security vulnerabilities, including buffer overflows, use-after-free issues, and the RETBLEED attack, alongside non-security bug fixes.
7.0 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to SUSE Linux Enterprise kernels and Google Android address multiple security vulnerabilities, including privilege escalations and memory leaks, while NetApp products face risks from flaws in Linux Kernel versions up to 5.16.8.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP3 and RT kernels were updated to address multiple security vulnerabilities, including CVEs for memory leaks, privilege escalations, and a specific out-of-array access issue in the udc-xilinx driver.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) and various Linux Kernel versions were updated to address multiple security vulnerabilities, including memory leaks, use-after-free, and double free issues.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated attackers to exploit improper validation of POST request parameters, potentially leading to denial of service or arbitrary code execution.
CWE-141 - Improper Neutralization of Parameter/Argument DelimitersAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T devices (versions < V3.0) allows unauthenticated attackers to exploit improper validation of GET and POST request parameters, leading to potential denial of service or arbitrary code execution.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to capture unencrypted HTTP web traffic, potentially disrupting device functionality.
CWE-319 - Cleartext Transmission of Sensitive InformationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit reflected XSS attacks due to improper handling of GET request parameters reflected in the web server response.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit unencrypted challenge-response communication, potentially gaining access to the device's management interface.
CWE-294 - Authentication Bypass by Capture-replayAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated users to access critical device information due to inadequate access protection in the web-based management interface.
CWE-306 - Missing Authentication for Critical FunctionAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated attackers to exploit improper input validation in the configuration interface, enabling persistent XSS attacks affecting logged-in users.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated users to access internal configuration details due to inadequate access protection in the web-based management interface.
CWE-306 - Missing Authentication for Critical FunctionAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit improper file handling for XSS attacks, potentially enabling actions on behalf of legitimate users via error logs.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Vulnerabilities in SICAM P850, P855, and T devices (all versions < V3.00) allow unauthenticated access to web interface pages, enabling attackers to delete log files without authentication.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent kernel updates for SUSE Linux Enterprise and various Linux Kernel versions addressed multiple security vulnerabilities, including the RETBLEED attack, use-after-free issues, buffer overflows, and restriction bypasses related to the PT_SUSPEND_SECCOMP flag.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Vulnerabilities in SiPass integrated AC5102 and ACC-AP devices allow local and remote attackers to upload or modify firmware due to inadequate integrity checks during firmware updates.
6.2 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GnuPGP has multiple vulnerabilities, including signature forgery and status injection issues, while recent updates to gpg2 and Docker images for Dagster-cloud and Spectrafit address these security concerns.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The Linux kernel prior to version 5.18.13 contains a vulnerability in the block starting symbol (.bss) that may allow Xen PV guest OS users to perform denial of service attacks or escalate privileges.
CWE-311 - Missing Encryption of Sensitive DataAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Quagga and FRRouting address multiple vulnerabilities, including sensitive information disclosure and denial of service risks due to BGP processing issues and out-of-bounds read vulnerabilities.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to VLC, Oracle products, zlib, and Dagster-cloud address various vulnerabilities, including critical issues in Oracle systems and security fixes in zlib and opencv-python.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850, P855, and T devices allows session takeover due to the acceptance of user-defined session cookies without renewal after login/logout.
CWE-384 - Session FixationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850, P855 (all versions < V3.10) and SICAM T (all versions < V3.0) devices allows unauthenticated attackers to execute arbitrary code or cause denial of service due to improper GET request parameter validation.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels addressed critical security vulnerabilities, including stack overflows, denial of service, memory leaks, and use-after-free issues, enhancing overall system stability and security.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in POWER METER models SICAM Q100, P850, P855, and T allows authenticated remote attackers to crash the device or execute arbitrary code due to improper validation of the Language-parameter in web interface requests.
9.9 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat OpenShift and multiple NetApp products have vulnerabilities in components like 'less', allowing local attackers to execute arbitrary commands, manipulate files, or disclose sensitive information due to improper handling of shell metacharacters.
8.4 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5, 15 SP2, SP3, SP4, and SP5 were updated to address multiple security vulnerabilities, including use-after-free issues, memory leaks, and kernel panics.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, null pointer dereferences, and race conditions, with numerous CVEs resolved.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP3, SP4, and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, race conditions, and null pointer dereferences, along with various non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, use-after-free issues, and a buffer overflow in the USB gadget's setup handler.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP4/SP5, including Azure and RT variants, received updates addressing multiple security vulnerabilities such as memory leaks and use-after-free issues, alongside driver-related fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels, including 15 SP5, 15 SP4, and 12 SP5, addressed critical security vulnerabilities such as use-after-free and memory leaks in network and display drivers.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels (15 SP5, 15 SP4, 15 SP3, 15 SP2, 12 SP5) addressed critical security vulnerabilities, including use-after-free and memory leak issues in network and display components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP5 and 12 SP5 kernels received updates addressing multiple security vulnerabilities, including memory leaks, use-after-free issues, and out-of-bounds access across various components.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including use-after-free issues and memory leaks in networking and display components.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP3 to SP5 have been updated to address multiple security vulnerabilities, including race conditions, buffer overflows, and memory management issues, alongside various non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates address multiple vulnerabilities across various platforms, including Oracle Communications, Red Hat OpenShift, and shadow-utils, affecting user account management and potentially leading to unauthorized access and data leaks.
5.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python 3.11 and earlier versions address multiple security vulnerabilities, particularly in email parsing and libexpat, alongside various non-security improvements and fixes for CVEs.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for macOS Ventura, Monterey, and Big Sur address multiple security vulnerabilities, while curl updates fix various flaws, including use-after-free and information disclosure issues, alongside a critical vulnerability in Oracle Enterprise Manager.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The shadow update addresses CVE-2023-29383 related to /etc/shadow manipulation, resolves control character injection vulnerabilities in Shadow 4.13, and includes various non-security bug fixes.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for macOS Ventura, Monterey, and Big Sur address critical vulnerabilities, while Oracle, Red Hat OpenShift, and ncurses have multiple security flaws that could lead to system compromise and denial-of-service conditions.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SICAM P850 and P855 devices (all versions < V3.11) are vulnerable to Cross-Site Request Forgery attacks, allowing unauthorized actions via malicious links targeting authenticated users.
CWE-352 - Cross-Site Request Forgery (CSRF)Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850 and P855 devices (all versions < V3.11) allows attackers to impersonate legitimate users by exploiting missing cookie protection flags and accessing session tokens.
CWE-732 - Incorrect Permission Assignment for Critical ResourceAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The frr and quagga updates address multiple vulnerabilities, including issues with BGP attributes, zero-length NLRIs, and denial of service risks, enhancing overall stability and security.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities across Oracle Communications products, curl, and Siemens products allow unauthorized access, data manipulation, and potential Denial-of-Service, with CVSS scores of 6.5 for specific Oracle vulnerabilities.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The FRRouting 8.5.6 update addresses multiple vulnerabilities, including crashes from crafted BGP UPDATE messages and malformed MP_REACH_NLRI data, while enhancing PIM/PIMv6/BGP and VRF support.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The frr 8.5.6 update addresses multiple vulnerabilities in BGP UPDATE processing, including denial-of-service issues and crashes from malformed messages and improper attribute handling.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python interpreters and Oracle Database Server address multiple security vulnerabilities, including denial of service risks and memory race conditions, alongside various bug fixes and enhancements.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to Python address multiple security vulnerabilities, including buffer overreads and email header injection, affecting versions up to 3.9 and impacting various NetApp products.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various Python versions address multiple vulnerabilities, including denial of service and excessive resource consumption, particularly in the tarfile and http.cookies modules, alongside Oracle Database patches for significant vulnerabilities.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Python versions, including venv-salt-minion, address multiple security vulnerabilities, particularly email header injection and resource consumption issues, alongside numerous bug fixes and enhancements.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python 3.x and Oracle products address multiple security vulnerabilities, including denial of service, excessive resource consumption, and email header injection, with varying severity levels across different versions.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities in curl and Oracle products, including credential leakage and unauthorized data access, affect various versions of software, notably impacting cURL and Oracle Communications Unified Assurance.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python address CVE-2024-11168, fixing improper validation of IPv6 and IPvFuture addresses, and resolving vulnerabilities in the `urllib.parse.urlsplit()` and `urlparse()` functions that could lead to SSRF exploits.
CWE-1287 - Improper Validation of Specified Type of InputAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities affecting Oracle Communications EAGLE LNP Application Processor, Oracle Cloud Native Core Policy, and GNU libtasn1 could lead to denial of service attacks, with CVSS scores of 5.3 for some products.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A flaw in GnuTLS related to inefficient DER decoding in libtasn1 can lead to denial-of-service conditions, affecting multiple NetApp products and identified as CVE-2024-12243.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The util-linux update addresses critical vulnerabilities, particularly in the 'wall' command, neutralizing escape sequences to prevent account takeover and other potential exploits in versions up to 2.40.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The Less text file viewer has an OS command execution vulnerability due to mishandled newline characters in file names, affecting multiple NetApp products and allowing remote command execution when the LESSOPEN variable is set.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
DOMPurify has addressed a nesting-based mXSS vulnerability in versions 2.5.0 and 3.1.3, while HPE Private Cloud AI has identified remote exploit vulnerabilities.
10.0 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities across Oracle Communications Cloud Native Core services and libexpat allow unauthenticated denial of service attacks, with CVSS scores of 5.9, affecting various versions and components.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent vulnerabilities in Oracle Communications Cloud Native Core and Gnome Glib versions prior to 2.82.1 expose systems to unauthorized access and buffer overflow risks, potentially leading to data compromise and service disruptions.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II (versions < V2.17.0) allows code injection in the DHCP Server configuration file, enabling attackers to gain root access via a reverse shell.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II family versions prior to V2.17.0 allows attackers to inject parameters during Dynamic DNS configuration, potentially leading to root access via a reverse shell.
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in the RUGGEDCOM ROX II family (versions < V2.17.0) allows attackers to gain root access through insufficient validation during configuration file handling.
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II devices (versions < V2.17.0) allows attackers to execute arbitrary code as root due to the SCEP client's failure to validate multiple fields during secure certificate enrollment.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II (versions < V2.17.0) allows code injection via VRF, enabling attackers to execute arbitrary code with root privileges.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in the RUGGEDCOM ROX II family (versions < V2.17.0) allows code injection via IPsec, enabling attackers to execute arbitrary code with root privileges.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to Python versions 3.6, 3.11, 3.12, and 3.13.5 address security vulnerabilities related to improper URL parsing of domain names with square brackets, which violate RFC 3986 and could lead to unauthorized data manipulation.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Palo Alto Networks has addressed vulnerabilities in Prisma® Access Browser and highlighted a high-severity sandbox escape flaw in Google Chrome on Windows, linked to an incorrect handle in Mojo.
8.3 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to curl (version 8.14.1) address critical security vulnerabilities, including cache poisoning risks in WebSocket code and a denial of service flaw in Oracle Communications Unified Inventory Management.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in various versions of COMOS, NX, Simcenter 3D, Simcenter Femap, and Solid Edge products allows for potential man-in-the-middle attacks due to the IAM client not validating server certificates for TLS connections.
7.4 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in COMOS, NX, Simcenter, and Tecnomatix products arises from the SALT SDK's failure to validate server certificates for TLS connections, risking man-in-the-middle attacks.
8.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in Gridscale X Prepay (versions < V4.2.1) allows unauthenticated remote attackers to perform user enumeration, potentially facilitating brute force attacks on valid users.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in Gridscale X Prepay (versions < V4.2.1) allows locked-out users to exploit capture-replay of authentication tokens, enabling them to establish valid sessions.
6.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEMA Remote Connect Server (versions < V3.2 SP4) allows unauthorized access to private SSL/TLS keys, enabling attackers to impersonate the server and conduct man-in-the-middle attacks.
CWE-732 - Incorrect Permission Assignment for Critical ResourceAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEMA Remote Connect Server (versions < V3.2 SP4) allows unauthorized modification of the system_ticketinfo table, enabling database users to bypass licensing restrictions and modify database values directly.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The document outlines a vulnerability in certain products that lack TCP sequence number validation, enabling unauthenticated remote attackers to disrupt TCP-based services through the injection of spoofed IP packets.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEC Security Monitor (versions < V4.10.0) allows lowly privileged authenticated local attackers to read or write any file on the server or sensor due to inadequate authorization checks.
6.7 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEC Security Monitor versions prior to V4.10.0 allows lowly privileged authenticated attackers to exploit input validation issues in the date parameter during report generation, potentially causing a denial of service.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM devices (versions below V5.10.1) allows authenticated remote attackers to exploit improper input validation during TLS certificate uploads, potentially leading to device crashes and Denial of Service.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) exposes sensitive firmware information, compromising the device's confidentiality, integrity, and availability.
8.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) allows an attacker with physical access to exploit an unauthenticated USB port, potentially causing a denial of service by triggering a reboot.
4.6 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) leads to inconsistent SNMP behavior, potentially allowing unauthorized access to sensitive data and compromising confidentiality.
4.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (all versions < V4.0.1) allows affected devices to expose server information in their responses, potentially aiding attackers with network access in targeted attacks.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Elspec G5 devices up to version 1.2.2.19 have a vulnerability that allows physical access to reset the Admin password using a USB drive with a specific reset string.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The update for binutils version 2.32 addresses multiple security vulnerabilities, including memory access issues and buffer overflows, while also introducing support for new architectures.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
References
138 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- (Remote) code execution (root/admin rechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n- Verhogen van rechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "general",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "general",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "general",
"text": "Improper Neutralization of Escape, Meta, or Control Sequences",
"title": "CWE-150"
},
{
"category": "general",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "general",
"text": "Integer Coercion Error",
"title": "CWE-192"
},
{
"category": "general",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Insertion of Sensitive Information Into Sent Data",
"title": "CWE-201"
},
{
"category": "general",
"text": "Observable Discrepancy",
"title": "CWE-203"
},
{
"category": "general",
"text": "Observable Response Discrepancy",
"title": "CWE-204"
},
{
"category": "general",
"text": "Improper Removal of Sensitive Information Before Storage or Transfer",
"title": "CWE-212"
},
{
"category": "general",
"text": "CWE-264",
"title": "CWE-264"
},
{
"category": "general",
"text": "Privilege Chaining",
"title": "CWE-268"
},
{
"category": "general",
"text": "Privilege Dropping / Lowering Errors",
"title": "CWE-271"
},
{
"category": "general",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "general",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "general",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "general",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Incorrect Implementation of Authentication Algorithm",
"title": "CWE-303"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "CWE-310",
"title": "CWE-310"
},
{
"category": "general",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "general",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "general",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "general",
"text": "Use of Weak Hash",
"title": "CWE-328"
},
{
"category": "general",
"text": "Generation of Predictable Numbers or Identifiers",
"title": "CWE-340"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "general",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Session Fixation",
"title": "CWE-384"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "CWE-399",
"title": "CWE-399"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "general",
"text": "Missing Lock Check",
"title": "CWE-414"
},
{
"category": "general",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Expected Behavior Violation",
"title": "CWE-440"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Improper Initialization",
"title": "CWE-665"
},
{
"category": "general",
"text": "Improper Locking",
"title": "CWE-667"
},
{
"category": "general",
"text": "Exposure of Resource to Wrong Sphere",
"title": "CWE-668"
},
{
"category": "general",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
},
{
"category": "general",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "general",
"text": "Improper Check for Unusual or Exceptional Conditions",
"title": "CWE-754"
},
{
"category": "general",
"text": "Release of Invalid Pointer or Reference",
"title": "CWE-763"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "general",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Missing Initialization of Resource",
"title": "CWE-909"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Improper Verification of Source of a Communication Channel",
"title": "CWE-940"
},
{
"category": "general",
"text": "CWE-1214",
"title": "CWE-1214"
},
{
"category": "general",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "general",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-202008.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-356310.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-420375.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-471761.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-626856.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-710408.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-734261.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-868571.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-882673.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-915282.html"
}
],
"title": "Kwetsbaarheden verholpen in Siemens producten",
"tracking": {
"current_release_date": "2025-12-09T13:15:05.391966Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2025-0382",
"initial_release_date": "2025-12-09T13:15:05.391966Z",
"revision_history": [
{
"date": "2025-12-09T13:15:05.391966Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Building X - Security Manager Edge Controller (ACC-AP)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "COMOS V10.4"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "COMOS V10.4.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "COMOS V10.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "COMOS V10.5.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "COMOS V10.6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "Energy Services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "Gridscale X Prepay"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "NX V2412"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "NX V2506"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "SICAM"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "SIMATIC CFU DIQ"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "SIMATIC CFU PA"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "SIMATIC CN 4100"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "SIMATIC ET 200AL IM 157-1 PN"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "SIMATIC MV540 H Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "SIMATIC PN/PN Coupler"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-18"
}
}
],
"category": "product_name",
"name": "SIMATIC S7"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-19"
}
}
],
"category": "product_name",
"name": "SINEC INS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-20"
}
}
],
"category": "product_name",
"name": "SINEC NMS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-21"
}
}
],
"category": "product_name",
"name": "SINEC PNI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-22"
}
}
],
"category": "product_name",
"name": "SINEMA Remote Connect Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-23"
}
}
],
"category": "product_name",
"name": "SIPLUS ET 200MP IM 155-5 PN HF"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-24"
}
}
],
"category": "product_name",
"name": "SIPLUS HCS4200 CIM4210"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-25"
}
}
],
"category": "product_name",
"name": "SIPLUS NET PN/PN Coupler"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-26"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1212 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-27"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1214 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-28"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1215 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-29"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1500 CPU 1511-1 PN"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-30"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-300 CPU 314C-2 PN/DP"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-31"
}
}
],
"category": "product_name",
"name": "Solid Edge SE2025"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-32"
}
}
],
"category": "product_name",
"name": "Solid Edge SE2026"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-7169",
"cwe": {
"id": "CWE-271",
"name": "Privilege Dropping / Lowering Errors"
},
"notes": [
{
"category": "other",
"text": "Privilege Dropping / Lowering Errors",
"title": "CWE-271"
},
{
"category": "description",
"text": "A vulnerability in shadow 4.5\u0027s newgidmap allows unprivileged users to exploit user namespaces, potentially bypassing access restrictions set by administrators.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-7169 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-7169.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-7169"
},
{
"cve": "CVE-2018-9234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "GnuPG versions 2.2.4 and 2.2.5 have a vulnerability (CVE-2018-9234) that allows remote attackers to bypass security restrictions by using a signing subkey for key certification without enforcing the offline master Certify key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-9234 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-9234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-9234"
},
{
"cve": "CVE-2018-12934",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "description",
"text": "The \u0027remember_Ktype\u0027 function in cplus-dem.c of GNU libiberty, present in GNU Binutils 2.30, is susceptible to excessive memory consumption, which may result in out-of-memory conditions during cxxfilt execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-12934 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-12934.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-12934"
},
{
"cve": "CVE-2019-9893",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"notes": [
{
"category": "other",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "description",
"text": "The libseccomp 2.4.1 update resolves a BPF generation bug, enhances syscall tables, addresses CVE-2019-9893, and improves support for various architectures while fixing prior 64-bit syscall argument comparison issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-9893 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-9893.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-9893"
},
{
"cve": "CVE-2019-12900",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "CWE-1214",
"title": "CWE-1214"
},
{
"category": "description",
"text": "The updates for ClamAV version 0.103.0 and bzip2 address multiple security vulnerabilities, including non-blocking database reloads in ClamAV and out-of-bounds writes in bzip2, enhancing overall functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-12900 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-12900.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-12900"
},
{
"cve": "CVE-2019-14866",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Versions of cpio prior to 2.13 have a vulnerability due to improper input validation when generating TAR archives, allowing unauthorized file permissions and paths that could compromise systems upon extraction by high-privilege users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-14866 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-14866.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-14866"
},
{
"cve": "CVE-2020-12762",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and its components, including json-c and libfastjson, have multiple vulnerabilities, particularly an integer overflow and out-of-bounds write issue (CVE-2020-12762) affecting large JSON files, allowing potential arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-12762 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-12762.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-12762"
},
{
"cve": "CVE-2020-21047",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "The libcpu component of elfutils version 0.177 has a denial-of-service vulnerability that can be exploited by attackers through specially crafted ELF files, leading to application crashes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-21047 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-21047.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-21047"
},
{
"cve": "CVE-2020-22217",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "other",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "C-ares versions before 1.16.1 and up to 1.17.0 have a buffer overflow vulnerability in the ares_parse_soa_reply function, addressed by the libcares2 update for CVE-2020-22217.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-22217 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-22217.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-22217"
},
{
"cve": "CVE-2020-35525",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "A NULL pointer dereference vulnerability in SQLite 3.31.1 can cause out-of-memory errors during INTERSECT query processing, potentially leading to Denial of Service attacks in affected NetApp products.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-35525 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-35525.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-35525"
},
{
"cve": "CVE-2021-35550",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities related to TLS ciphers, memory allocation, and keystore corruption, while Oracle Java SE and GraalVM have critical vulnerabilities allowing unauthorized access to sensitive data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35550 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35550.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35550"
},
{
"cve": "CVE-2021-35556",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35556 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35556.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35556"
},
{
"cve": "CVE-2021-35559",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "description",
"text": "Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as memory allocation issues and weak cipher preferences, while also enhancing functionalities and updating to newer service refreshes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35559 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35559.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35559"
},
{
"cve": "CVE-2021-35561",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Recent updates for OpenJDK and Oracle Java SE address multiple vulnerabilities, including weak TLS ciphers, excessive memory allocations, and denial of service risks across various versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35561 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35561.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35561"
},
{
"cve": "CVE-2021-35564",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Multiple updates for IBM and OpenJDK Java versions address various vulnerabilities, including excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several releases.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35564 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35564.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35564"
},
{
"cve": "CVE-2021-35565",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "other",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "description",
"text": "Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35565 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35565.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35565"
},
{
"cve": "CVE-2021-35567",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Recent updates for Java, including OpenJDK and Oracle Java SE, address multiple vulnerabilities related to memory allocation, TLS issues, and unauthorized access, with CVSS scores indicating significant risks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35567 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35567.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35567"
},
{
"cve": "CVE-2021-35578",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "Recent updates for Java SE, OpenJDK, and Oracle GraalVM address multiple vulnerabilities, including memory allocation issues, weak TLS ciphers, and denial of service risks, affecting various supported versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35578 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35578.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35578"
},
{
"cve": "CVE-2021-35586",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35586 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35586.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35586"
},
{
"cve": "CVE-2021-35588",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for IBM Java and OpenJDK address multiple vulnerabilities, including memory allocation issues and weak cipher preferences, while also enhancing versions to Java 7.1 SR5, Java 8.0 SR7, and OpenJDK 8u312 and 7u321.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35588 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35588.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35588"
},
{
"cve": "CVE-2021-35603",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "other",
"text": "Observable Discrepancy",
"title": "CWE-203"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities, including TLS cipher issues and memory allocation problems, while Oracle Java SE and GraalVM Enterprise Edition have vulnerabilities that could compromise data confidentiality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35603 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35603.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35603"
},
{
"cve": "CVE-2021-36084",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including use-after-free and Denial of Service risks, potentially allowing attackers to execute arbitrary code or cause service disruptions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36084 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36084.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36084"
},
{
"cve": "CVE-2021-36085",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and products, particularly those utilizing SELinux.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36085 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36085.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36085"
},
{
"cve": "CVE-2021-36086",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution, affecting various components and requiring user interaction or elevated privileges for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36086 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36086.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36086"
},
{
"cve": "CVE-2021-36087",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and requiring user interaction or elevated privileges for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36087 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36087.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36087"
},
{
"cve": "CVE-2021-38185",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "GNU cpio version 2.13 is vulnerable to remote code execution due to an integer overflow in the ds_fgetstr function when processing specially crafted pattern files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-38185 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-38185.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-38185"
},
{
"cve": "CVE-2021-47358",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks and use-after-free issues, across various kernel versions and components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-47358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-47358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-47358"
},
{
"cve": "CVE-2021-47361",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 12 and 15 SP5 kernels, including RT and Azure variants, were updated to address multiple security vulnerabilities such as memory leaks and use-after-free issues, enhancing overall system security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-47361 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-47361.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-47361"
},
{
"cve": "CVE-2022-0435",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels and Linux Kernel versions have been updated to address multiple security vulnerabilities, including memory corruption, race conditions, and remote stack overflow issues, alongside various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0435 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0435.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0435"
},
{
"cve": "CVE-2022-0492",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple security vulnerabilities, including privilege escalation, memory corruption, and transient execution side-channel attacks across several service packs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0492 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0492.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0492"
},
{
"cve": "CVE-2022-0847",
"cwe": {
"id": "CWE-909",
"name": "Missing Initialization of Resource"
},
"notes": [
{
"category": "other",
"text": "Missing Initialization of Resource",
"title": "CWE-909"
},
{
"category": "other",
"text": "Improper Initialization",
"title": "CWE-665"
},
{
"category": "other",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including privilege escalation and memory access issues, alongside mitigations for transient execution side-channel attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0847 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0847.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0847"
},
{
"cve": "CVE-2022-0850",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) were updated to address various security vulnerabilities, including memory leaks, use-after-free, double free issues, and information leak flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0850 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0850.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0850"
},
{
"cve": "CVE-2022-1353",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"notes": [
{
"category": "other",
"text": "Improper Removal of Sensitive Information Before Storage or Transfer",
"title": "CWE-212"
},
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Multiple updates were released for SUSE Linux Enterprise kernels addressing various security vulnerabilities and non-security bugs, including memory management issues, privilege escalation risks, and access control flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-1353 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-1353.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-1353"
},
{
"cve": "CVE-2022-1734",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across multiple versions have been updated to address various security vulnerabilities, including RETBLEED, use-after-free issues, and non-security bug fixes, enhancing overall system stability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-1734 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-1734.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-1734"
},
{
"cve": "CVE-2022-2639",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "other",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
},
{
"category": "other",
"text": "Integer Coercion Error",
"title": "CWE-192"
},
{
"category": "other",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernel updates across various versions address multiple security vulnerabilities, including race conditions, use-after-free issues, and denial of service, alongside non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-2639 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-2639.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-2639"
},
{
"cve": "CVE-2022-2964",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels addressed multiple security vulnerabilities, including use-after-free and memory corruption issues, across several versions and components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-2964 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-2964.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-2964"
},
{
"cve": "CVE-2022-3424",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple critical security vulnerabilities, including use-after-free and memory corruption issues, across several components and drivers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3424 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-3424.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-3424"
},
{
"cve": "CVE-2022-20141",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "other",
"text": "Improper Locking",
"title": "CWE-667"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across SUSE Linux Enterprise and Linux Kernel versions addressed various security vulnerabilities, including buffer overflows, use-after-free issues, and the RETBLEED attack, alongside non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-20141 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-20141.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-20141"
},
{
"cve": "CVE-2022-23039",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-23039 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23039.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-23039"
},
{
"cve": "CVE-2022-23040",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-23040 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23040.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-23040"
},
{
"cve": "CVE-2022-24958",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"notes": [
{
"category": "other",
"text": "Release of Invalid Pointer or Reference",
"title": "CWE-763"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to SUSE Linux Enterprise kernels and Google Android address multiple security vulnerabilities, including privilege escalations and memory leaks, while NetApp products face risks from flaws in Linux Kernel versions up to 5.16.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-24958 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-24958.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-24958"
},
{
"cve": "CVE-2022-27223",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP3 and RT kernels were updated to address multiple security vulnerabilities, including CVEs for memory leaks, privilege escalations, and a specific out-of-array access issue in the udc-xilinx driver.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-27223 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-27223.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-27223"
},
{
"cve": "CVE-2022-28390",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "other",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) and various Linux Kernel versions were updated to address multiple security vulnerabilities, including memory leaks, use-after-free, and double free issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-28390 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-28390.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-28390"
},
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated attackers to exploit improper validation of POST request parameters, potentially leading to denial of service or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29872 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29872.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM T devices (versions \u003c V3.0) allows unauthenticated attackers to exploit improper validation of GET and POST request parameters, leading to potential denial of service or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29873 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29873.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to capture unencrypted HTTP web traffic, potentially disrupting device functionality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29874 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29874.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit reflected XSS attacks due to improper handling of GET request parameters reflected in the web server response.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit unencrypted challenge-response communication, potentially gaining access to the device\u0027s management interface.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29878 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29878.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated users to access critical device information due to inadequate access protection in the web-based management interface.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29879 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29879.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated attackers to exploit improper input validation in the configuration interface, enabling persistent XSS attacks affecting logged-in users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29880 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29880.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated users to access internal configuration details due to inadequate access protection in the web-based management interface.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29881 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29881.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit improper file handling for XSS attacks, potentially enabling actions on behalf of legitimate users via error logs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29882 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29882.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Vulnerabilities in SICAM P850, P855, and T devices (all versions \u003c V3.00) allow unauthenticated access to web interface pages, enabling attackers to delete log files without authentication.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29883 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29883.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29883"
},
{
"cve": "CVE-2022-30594",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "Recent kernel updates for SUSE Linux Enterprise and various Linux Kernel versions addressed multiple security vulnerabilities, including the RETBLEED attack, use-after-free issues, buffer overflows, and restriction bypasses related to the PT_SUSPEND_SECCOMP flag.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-30594 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-30594.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-30594"
},
{
"cve": "CVE-2022-31807",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "Vulnerabilities in SiPass integrated AC5102 and ACC-AP devices allow local and remote attackers to upload or modify firmware due to inadequate integrity checks during firmware updates.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-31807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-31807.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-31807"
},
{
"cve": "CVE-2022-34903",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "GnuPGP has multiple vulnerabilities, including signature forgery and status injection issues, while recent updates to gpg2 and Docker images for Dagster-cloud and Spectrafit address these security concerns.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-34903 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-34903.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-34903"
},
{
"cve": "CVE-2022-36123",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "other",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "description",
"text": "The Linux kernel prior to version 5.18.13 contains a vulnerability in the block starting symbol (.bss) that may allow Xen PV guest OS users to perform denial of service attacks or escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-36123 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-36123.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-36123"
},
{
"cve": "CVE-2022-37032",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Recent updates for Quagga and FRRouting address multiple vulnerabilities, including sensitive information disclosure and denial of service risks due to BGP processing issues and out-of-bounds read vulnerabilities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-37032 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37032.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-37032"
},
{
"cve": "CVE-2022-37434",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Recent updates to VLC, Oracle products, zlib, and Dagster-cloud address various vulnerabilities, including critical issues in Oracle systems and security fixes in zlib and opencv-python.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-37434 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37434.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-37434"
},
{
"cve": "CVE-2022-40226",
"cwe": {
"id": "CWE-384",
"name": "Session Fixation"
},
"notes": [
{
"category": "other",
"text": "Session Fixation",
"title": "CWE-384"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850, P855, and T devices allows session takeover due to the acceptance of user-defined session cookies without renewal after login/logout.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-40226 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-40226.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-40226"
},
{
"cve": "CVE-2022-41665",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850, P855 (all versions \u003c V3.10) and SICAM T (all versions \u003c V3.0) devices allows unauthenticated attackers to execute arbitrary code or cause denial of service due to improper GET request parameter validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-41665 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-41665.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-41665"
},
{
"cve": "CVE-2022-41858",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels addressed critical security vulnerabilities, including stack overflows, denial of service, memory leaks, and use-after-free issues, enhancing overall system stability and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-41858 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-41858.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-41858"
},
{
"cve": "CVE-2022-43439",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in POWER METER models SICAM Q100, P850, P855, and T allows authenticated remote attackers to crash the device or execute arbitrary code due to improper validation of the Language-parameter in web interface requests.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-43439 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-43439.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-43439"
},
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "Red Hat OpenShift and multiple NetApp products have vulnerabilities in components like \u0027less\u0027, allowing local attackers to execute arbitrary commands, manipulate files, or disclose sensitive information due to improper handling of shell metacharacters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48624 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48624.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48624"
},
{
"cve": "CVE-2022-48626",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5, 15 SP2, SP3, SP4, and SP5 were updated to address multiple security vulnerabilities, including use-after-free issues, memory leaks, and kernel panics.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48626 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48626.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48626"
},
{
"cve": "CVE-2022-48919",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "other",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, null pointer dereferences, and race conditions, with numerous CVEs resolved.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48919 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48919.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48919"
},
{
"cve": "CVE-2022-48926",
"cwe": {
"id": "CWE-414",
"name": "Missing Lock Check"
},
"notes": [
{
"category": "other",
"text": "Missing Lock Check",
"title": "CWE-414"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP3, SP4, and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, race conditions, and null pointer dereferences, along with various non-security bug fixes.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48926 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48926.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48926"
},
{
"cve": "CVE-2022-48948",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, use-after-free issues, and a buffer overflow in the USB gadget\u0027s setup handler.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48948 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48948.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48948"
},
{
"cve": "CVE-2022-48951",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP4/SP5, including Azure and RT variants, received updates addressing multiple security vulnerabilities such as memory leaks and use-after-free issues, alongside driver-related fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48951 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48951.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48951"
},
{
"cve": "CVE-2022-48960",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels, including 15 SP5, 15 SP4, and 12 SP5, addressed critical security vulnerabilities such as use-after-free and memory leaks in network and display drivers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48960 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48960.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48960"
},
{
"cve": "CVE-2022-48962",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels (15 SP5, 15 SP4, 15 SP3, 15 SP2, 12 SP5) addressed critical security vulnerabilities, including use-after-free and memory leak issues in network and display components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48962 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48962.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48962"
},
{
"cve": "CVE-2022-48966",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP5 and 12 SP5 kernels received updates addressing multiple security vulnerabilities, including memory leaks, use-after-free issues, and out-of-bounds access across various components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48966 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48966.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48966"
},
{
"cve": "CVE-2022-48967",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including use-after-free issues and memory leaks in networking and display components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48967 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48967.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48967"
},
{
"cve": "CVE-2022-49058",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP3 to SP5 have been updated to address multiple security vulnerabilities, including race conditions, buffer overflows, and memory management issues, alongside various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-49058 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-49058.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-49058"
},
{
"cve": "CVE-2023-4641",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"notes": [
{
"category": "other",
"text": "Incorrect Implementation of Authentication Algorithm",
"title": "CWE-303"
},
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Recent updates address multiple vulnerabilities across various platforms, including Oracle Communications, Red Hat OpenShift, and shadow-utils, affecting user account management and potentially leading to unauthorized access and data leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-4641 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-4641.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-4641"
},
{
"cve": "CVE-2023-27043",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for Python 3.11 and earlier versions address multiple security vulnerabilities, particularly in email parsing and libexpat, alongside various non-security improvements and fixes for CVEs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-27043 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-27043.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-27043"
},
{
"cve": "CVE-2023-28322",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"notes": [
{
"category": "other",
"text": "Expected Behavior Violation",
"title": "CWE-440"
},
{
"category": "other",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Recent updates for macOS Ventura, Monterey, and Big Sur address multiple security vulnerabilities, while curl updates fix various flaws, including use-after-free and information disclosure issues, alongside a critical vulnerability in Oracle Enterprise Manager.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-28322 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-28322.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-28322"
},
{
"cve": "CVE-2023-29383",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "The shadow update addresses CVE-2023-29383 related to /etc/shadow manipulation, resolves control character injection vulnerabilities in Shadow 4.13, and includes various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-29383 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-29383.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-29383"
},
{
"cve": "CVE-2023-29491",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "Recent updates for macOS Ventura, Monterey, and Big Sur address critical vulnerabilities, while Oracle, Red Hat OpenShift, and ncurses have multiple security flaws that could lead to system compromise and denial-of-service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-29491 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-29491.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-29491"
},
{
"cve": "CVE-2023-30901",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"notes": [
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "description",
"text": "SICAM P850 and P855 devices (all versions \u003c V3.11) are vulnerable to Cross-Site Request Forgery attacks, allowing unauthorized actions via malicious links targeting authenticated users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-30901 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-30901.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-30901"
},
{
"cve": "CVE-2023-31238",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850 and P855 devices (all versions \u003c V3.11) allows attackers to impersonate legitimate users by exploiting missing cookie protection flags and accessing session tokens.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-31238 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-31238.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-31238"
},
{
"cve": "CVE-2023-41358",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "The frr and quagga updates address multiple vulnerabilities, including issues with BGP attributes, zero-length NLRIs, and denial of service risks, enhancing overall stability and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-41358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-41358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-41358"
},
{
"cve": "CVE-2023-46218",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"notes": [
{
"category": "other",
"text": "Insertion of Sensitive Information Into Sent Data",
"title": "CWE-201"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "description",
"text": "Multiple vulnerabilities across Oracle Communications products, curl, and Siemens products allow unauthorized access, data manipulation, and potential Denial-of-Service, with CVSS scores of 6.5 for specific Oracle vulnerabilities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46218 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-46218.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-46218"
},
{
"cve": "CVE-2023-46753",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "The FRRouting 8.5.6 update addresses multiple vulnerabilities, including crashes from crafted BGP UPDATE messages and malformed MP_REACH_NLRI data, while enhancing PIM/PIMv6/BGP and VRF support.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46753 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-46753.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-46753"
},
{
"cve": "CVE-2023-47234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "The frr 8.5.6 update addresses multiple vulnerabilities in BGP UPDATE processing, including denial-of-service issues and crashes from malformed messages and improper attribute handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-47234 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-47234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-47234"
},
{
"cve": "CVE-2024-0397",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "Recent updates for Python interpreters and Oracle Database Server address multiple security vulnerabilities, including denial of service risks and memory race conditions, alongside various bug fixes and enhancements.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-0397 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-0397.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-0397"
},
{
"cve": "CVE-2024-5642",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to Python address multiple security vulnerabilities, including buffer overreads and email header injection, affecting versions up to 3.9 and impacting various NetApp products.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-5642 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-5642.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-5642"
},
{
"cve": "CVE-2024-6232",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "Recent updates to various Python versions address multiple vulnerabilities, including denial of service and excessive resource consumption, particularly in the tarfile and http.cookies modules, alongside Oracle Database patches for significant vulnerabilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6232 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-6232.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-6232"
},
{
"cve": "CVE-2024-6923",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "Recent updates for various Python versions, including venv-salt-minion, address multiple security vulnerabilities, particularly email header injection and resource consumption issues, alongside numerous bug fixes and enhancements.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6923 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-6923.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-6923"
},
{
"cve": "CVE-2024-7592",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "Recent updates for Python 3.x and Oracle products address multiple security vulnerabilities, including denial of service, excessive resource consumption, and email header injection, with varying severity levels across different versions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-7592 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-7592.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-7592"
},
{
"cve": "CVE-2024-11053",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Multiple vulnerabilities in curl and Oracle products, including credential leakage and unauthorized data access, affect various versions of software, notably impacting cURL and Oracle Communications Unified Assurance.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11053 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-11053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-11053"
},
{
"cve": "CVE-2024-11168",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "Recent updates for Python address CVE-2024-11168, fixing improper validation of IPv6 and IPvFuture addresses, and resolving vulnerabilities in the `urllib.parse.urlsplit()` and `urlparse()` functions that could lead to SSRF exploits.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11168 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-11168.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-11168"
},
{
"cve": "CVE-2024-12133",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "Multiple vulnerabilities affecting Oracle Communications EAGLE LNP Application Processor, Oracle Cloud Native Core Policy, and GNU libtasn1 could lead to denial of service attacks, with CVSS scores of 5.3 for some products.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-12133 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12133.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-12133"
},
{
"cve": "CVE-2024-12243",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "A flaw in GnuTLS related to inefficient DER decoding in libtasn1 can lead to denial-of-service conditions, affecting multiple NetApp products and identified as CVE-2024-12243.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-12243 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12243.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-12243"
},
{
"cve": "CVE-2024-28085",
"cwe": {
"id": "CWE-268",
"name": "Privilege Chaining"
},
"notes": [
{
"category": "other",
"text": "Privilege Chaining",
"title": "CWE-268"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Neutralization of Escape, Meta, or Control Sequences",
"title": "CWE-150"
},
{
"category": "description",
"text": "The util-linux update addresses critical vulnerabilities, particularly in the \u0027wall\u0027 command, neutralizing escape sequences to prevent account takeover and other potential exploits in versions up to 2.40.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28085 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-28085.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-28085"
},
{
"cve": "CVE-2024-32487",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
},
{
"category": "description",
"text": "The Less text file viewer has an OS command execution vulnerability due to mishandled newline characters in file names, affecting multiple NetApp products and allowing remote command execution when the LESSOPEN variable is set.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-32487 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-32487.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-32487"
},
{
"cve": "CVE-2024-47875",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "DOMPurify has addressed a nesting-based mXSS vulnerability in versions 2.5.0 and 3.1.3, while HPE Private Cloud AI has identified remote exploit vulnerabilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47875 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-47875.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-47875"
},
{
"cve": "CVE-2024-50602",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "other",
"text": "Improper Check for Unusual or Exceptional Conditions",
"title": "CWE-754"
},
{
"category": "description",
"text": "Multiple vulnerabilities across Oracle Communications Cloud Native Core services and libexpat allow unauthenticated denial of service attacks, with CVSS scores of 5.9, affecting various versions and components.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-50602 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-50602.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-50602"
},
{
"cve": "CVE-2024-52533",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "Recent vulnerabilities in Oracle Communications Cloud Native Core and Gnome Glib versions prior to 2.82.1 expose systems to unauthorized access and buffer overflow risks, potentially leading to data compromise and service disruptions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52533 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-52533.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-52533"
},
{
"cve": "CVE-2024-56835",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II (versions \u003c V2.17.0) allows code injection in the DHCP Server configuration file, enabling attackers to gain root access via a reverse shell.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56835 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56835.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56835"
},
{
"cve": "CVE-2024-56836",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II family versions prior to V2.17.0 allows attackers to inject parameters during Dynamic DNS configuration, potentially leading to root access via a reverse shell.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56836 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56836.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56836"
},
{
"cve": "CVE-2024-56837",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "A vulnerability in the RUGGEDCOM ROX II family (versions \u003c V2.17.0) allows attackers to gain root access through insufficient validation during configuration file handling.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56837 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56837.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56837"
},
{
"cve": "CVE-2024-56838",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II devices (versions \u003c V2.17.0) allows attackers to execute arbitrary code as root due to the SCEP client\u0027s failure to validate multiple fields during secure certificate enrollment.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56838 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56838.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56838"
},
{
"cve": "CVE-2024-56839",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II (versions \u003c V2.17.0) allows code injection via VRF, enabling attackers to execute arbitrary code with root privileges.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56839 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56839.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56839"
},
{
"cve": "CVE-2024-56840",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in the RUGGEDCOM ROX II family (versions \u003c V2.17.0) allows code injection via IPsec, enabling attackers to execute arbitrary code with root privileges.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56840 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56840.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56840"
},
{
"cve": "CVE-2025-0938",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to Python versions 3.6, 3.11, 3.12, and 3.13.5 address security vulnerabilities related to improper URL parsing of domain names with square brackets, which violate RFC 3986 and could lead to unauthorized data manipulation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-0938 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-0938"
},
{
"cve": "CVE-2025-2783",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Palo Alto Networks has addressed vulnerabilities in Prisma\u00ae Access Browser and highlighted a high-severity sandbox escape flaw in Google Chrome on Windows, linked to an incorrect handle in Mojo.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:L/U:Amber",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-2783 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-2783.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-2783"
},
{
"cve": "CVE-2025-10148",
"cwe": {
"id": "CWE-340",
"name": "Generation of Predictable Numbers or Identifiers"
},
"notes": [
{
"category": "other",
"text": "Generation of Predictable Numbers or Identifiers",
"title": "CWE-340"
},
{
"category": "description",
"text": "Recent updates to curl (version 8.14.1) address critical security vulnerabilities, including cache poisoning risks in WebSocket code and a denial of service flaw in Oracle Communications Unified Inventory Management.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-10148 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-10148.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-10148"
},
{
"cve": "CVE-2025-40800",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in various versions of COMOS, NX, Simcenter 3D, Simcenter Femap, and Solid Edge products allows for potential man-in-the-middle attacks due to the IAM client not validating server certificates for TLS connections.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40800 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40800.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40800"
},
{
"cve": "CVE-2025-40801",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in COMOS, NX, Simcenter, and Tecnomatix products arises from the SALT SDK\u0027s failure to validate server certificates for TLS connections, risking man-in-the-middle attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40801 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40801.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40801"
},
{
"cve": "CVE-2025-40806",
"cwe": {
"id": "CWE-204",
"name": "Observable Response Discrepancy"
},
"notes": [
{
"category": "other",
"text": "Observable Response Discrepancy",
"title": "CWE-204"
},
{
"category": "description",
"text": "A vulnerability in Gridscale X Prepay (versions \u003c V4.2.1) allows unauthenticated remote attackers to perform user enumeration, potentially facilitating brute force attacks on valid users.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40806 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40806.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40806"
},
{
"cve": "CVE-2025-40807",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "description",
"text": "A vulnerability in Gridscale X Prepay (versions \u003c V4.2.1) allows locked-out users to exploit capture-replay of authentication tokens, enabling them to establish valid sessions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40807.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40807"
},
{
"cve": "CVE-2025-40818",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "description",
"text": "A vulnerability in SINEMA Remote Connect Server (versions \u003c V3.2 SP4) allows unauthorized access to private SSL/TLS keys, enabling attackers to impersonate the server and conduct man-in-the-middle attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40818 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40818.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40818"
},
{
"cve": "CVE-2025-40819",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "A vulnerability in SINEMA Remote Connect Server (versions \u003c V3.2 SP4) allows unauthorized modification of the system_ticketinfo table, enabling database users to bypass licensing restrictions and modify database values directly.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40819 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40819"
},
{
"cve": "CVE-2025-40820",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Source of a Communication Channel",
"title": "CWE-940"
},
{
"category": "description",
"text": "The document outlines a vulnerability in certain products that lack TCP sequence number validation, enabling unauthenticated remote attackers to disrupt TCP-based services through the injection of spoofed IP packets.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40820 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40820.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40820"
},
{
"cve": "CVE-2025-40830",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "other",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "description",
"text": "A vulnerability in SINEC Security Monitor (versions \u003c V4.10.0) allows lowly privileged authenticated local attackers to read or write any file on the server or sensor due to inadequate authorization checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40830 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40830.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40830"
},
{
"cve": "CVE-2025-40831",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in SINEC Security Monitor versions prior to V4.10.0 allows lowly privileged authenticated attackers to exploit input validation issues in the date parameter during report generation, potentially causing a denial of service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40831 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40831.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40831"
},
{
"cve": "CVE-2025-40935",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM devices (versions below V5.10.1) allows authenticated remote attackers to exploit improper input validation during TLS certificate uploads, potentially leading to device crashes and Denial of Service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40935 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40935.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40935"
},
{
"cve": "CVE-2025-40938",
"cwe": {
"id": "CWE-798",
"name": "Use of Hard-coded Credentials"
},
"notes": [
{
"category": "other",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) exposes sensitive firmware information, compromising the device\u0027s confidentiality, integrity, and availability.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40938 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40938"
},
{
"cve": "CVE-2025-40939",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) allows an attacker with physical access to exploit an unauthenticated USB port, potentially causing a denial of service by triggering a reboot.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40939 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40939.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40939"
},
{
"cve": "CVE-2025-40940",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) leads to inconsistent SNMP behavior, potentially allowing unauthorized access to sensitive data and compromising confidentiality.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40940 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40940.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40940"
},
{
"cve": "CVE-2025-40941",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (all versions \u003c V4.0.1) allows affected devices to expose server information in their responses, potentially aiding attackers with network access in targeted attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40941 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40941.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40941"
},
{
"cve": "CVE-2025-59392",
"cwe": {
"id": "CWE-288",
"name": "Authentication Bypass Using an Alternate Path or Channel"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "description",
"text": "Elspec G5 devices up to version 1.2.2.19 have a vulnerability that allows physical access to reset the Admin password using a USB drive with a specific reset string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-59392 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59392.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-59392"
},
{
"cve": "CVE-2018-1000876",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "The update for binutils version 2.32 addresses multiple security vulnerabilities, including memory access issues and buffer overflows, while also introducing support for new architectures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-1000876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-1000876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-1000876"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…