Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-3712 (GCVE-0-2021-3712)
Vulnerability from cvelistv5 – Published: 2021-08-24 14:50 – Updated: 2026-04-16 14:11
VLAI
EPSS
Title
Read buffer overruns processing ASN.1 strings
Summary
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Buffer overflow
- CWE-125 - Out-of-bounds Read
Assigner
References
25 references
Impacted products
210 products
| Vendor | Product | Version | |
|---|---|---|---|
| OpenSSL | OpenSSL |
Affected:
Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)
Affected: Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y) |
|
| Siemens | BFCClient |
Affected:
0 , < V2.17
(custom)
|
|
| Siemens | Industrial Edge - Machine Insight App |
Affected:
0 , < *
(custom)
|
|
| Siemens | Industrial Edge - PROFINET IO Connector |
Affected:
All versions < V1.1.1
|
|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU |
Affected:
All versions < V7.1
|
|
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM |
Affected:
All versions < V7.1
|
|
| Siemens | RUGGEDCOM ROX MX5000 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX MX5000RE |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1400 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1500 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1501 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1510 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1511 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1512 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1524 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX1536 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | RUGGEDCOM ROX RX5000 |
Affected:
0 , < V2.15.0
(custom)
|
|
| Siemens | SCALANCE M804PB |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M812-1 ADSL-Router |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M816-1 ADSL-Router |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M826-2 SHDSL-Router |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M874-2 |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M874-3 |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M876-3 |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M876-3 (ROK) |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M876-4 (EU) |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE M876-4 (NAM) |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE MUM853-1 (EU) |
Affected:
0 , < V7.1
(custom)
|
|
| Siemens | SCALANCE MUM856-1 (EU) |
Affected:
0 , < V7.1
(custom)
|
|
| Siemens | SCALANCE MUM856-1 (RoW) |
Affected:
0 , < V7.1
(custom)
|
|
| Siemens | SCALANCE S615 LAN-Router |
Affected:
All versions < V7.1
|
|
| Siemens | SCALANCE SC622-2C |
Affected:
All versions < V2.3
|
|
| Siemens | SCALANCE SC632-2C |
Affected:
All versions < V2.3
|
|
| Siemens | SCALANCE SC636-2C |
Affected:
All versions < V2.3
|
|
| Siemens | SCALANCE SC642-2C |
Affected:
All versions < V2.3
|
|
| Siemens | SCALANCE SC646-2C |
Affected:
All versions < V2.3
|
|
| Siemens | SCALANCE W1748-1 M12 |
Affected:
0 , < V3.0.0
(custom)
|
|
| Siemens | SCALANCE W1788-1 M12 |
Affected:
0 , < V3.0.0
(custom)
|
|
| Siemens | SCALANCE W1788-2 EEC M12 |
Affected:
0 , < V3.0.0
(custom)
|
|
| Siemens | SCALANCE W1788-2 M12 |
Affected:
0 , < V3.0.0
(custom)
|
|
| Siemens | SCALANCE W1788-2IA M12 |
Affected:
0 , < V3.0.0
(custom)
|
|
| Siemens | SCALANCE W721-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W722-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W734-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W734-1 RJ45 (USA) |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W738-1 M12 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W748-1 M12 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W748-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W761-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W774-1 M12 EEC |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W774-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W774-1 RJ45 (USA) |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W778-1 M12 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W778-1 M12 EEC |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W778-1 M12 EEC (USA) |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W786-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W786-2 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W786-2 SFP |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W786-2IA RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W788-1 M12 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W788-1 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W788-2 M12 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W788-2 M12 EEC |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE W788-2 RJ45 |
Affected:
0 , < V6.6.0
(custom)
|
|
| Siemens | SCALANCE WAM766-1 |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE WAM766-1 (US) |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE WAM766-1 EEC |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE WAM766-1 EEC (US) |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE WUM766-1 |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE WUM766-1 (USA) |
Affected:
0 , < V1.2.0
(custom)
|
|
| Siemens | SCALANCE X200-4P IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X201-3P IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X201-3P IRT PRO |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X202-2IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X202-2P IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X202-2P IRT PRO |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X204-2 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X204-2FM |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X204-2LD |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X204-2LD TS |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X204-2TS |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X204IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X204IRT PRO |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE X206-1 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X206-1LD |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X208 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X208PRO |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X212-2 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X212-2LD |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X216 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X224 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE X302-7 EEC (230V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (230V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (24V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (24V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (2x 230V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (2x 230V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (2x 24V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X302-7 EEC (2x 24V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X304-2FE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X306-1LD FE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (230V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (230V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (24V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (24V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (2x 230V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (2x 230V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (2x 24V, coated) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-2 EEC (2x 24V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-3 |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X307-3LD |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2 |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2LD |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2LH |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2LH+ |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2M |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2M PoE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X308-2M TS |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X310 |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X310FE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X320-1 FE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X320-1-2LD FE |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE X408-2 |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XF201-3P IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE XF202-2P IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE XF204 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE XF204-2 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE XF204-2BA IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE XF204IRT |
Affected:
0 , < V5.5.2
(custom)
|
|
| Siemens | SCALANCE XF206-1 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE XF208 |
Affected:
All versions < V5.2.6
|
|
| Siemens | SCALANCE XR324-12M (230V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-12M (230V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-12M (24V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-12M (24V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-12M TS (24V) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M PoE (230V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M PoE (230V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M PoE (24V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M PoE (24V, ports on rear) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SCALANCE XR324-4M PoE TS (24V, ports on front) |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SIMATIC CP 1242-7 V2 |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIMATIC CP 1243-1 |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIMATIC CP 1243-7 LTE EU |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIMATIC CP 1243-7 LTE US |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIMATIC CP 1243-8 IRC |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIMATIC CP 1542SP-1 |
Affected:
0 , < V2.2.28
(custom)
|
|
| Siemens | SIMATIC CP 1543-1 |
Affected:
All versions < V3.0.22
|
|
| Siemens | SIMATIC CP 1543SP-1 |
Affected:
0 , < V2.2.28
(custom)
|
|
| Siemens | SIMATIC CP 1545-1 |
Affected:
All versions < V1.1
|
|
| Siemens | SIMATIC PCS neo (Administration Console) |
Affected:
0 , < V3.1.1
(custom)
|
|
| Siemens | SIMATIC Process Historian OPC UA Server |
Affected:
0 , < V2020 SP1
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1211C AC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1211C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1211C DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1212C AC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1212C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1212C DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1212FC DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1212FC DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1214C AC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1214C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1214C DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1214FC DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1214FC DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1215C AC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1215C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1215C DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1215FC DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1215FC DC/DC/Rly |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIMATIC S7-1200 CPU 1217C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SINEC NMS |
Affected:
0 , < V1.0 SP3
(custom)
|
|
| Siemens | SINEMA Remote Connect Server |
Affected:
0 , < V3.1
(custom)
|
|
| Siemens | SINEMA Server V14 |
Affected:
0 , < *
(custom)
|
|
| Siemens | SINUMERIK Operate |
Affected:
All versions < V4.95 SP1
|
|
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC |
Affected:
0 , < V2.2.28
(custom)
|
|
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL |
Affected:
0 , < V2.2.28
(custom)
|
|
| Siemens | SIPLUS NET CP 1242-7 V2 |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIPLUS NET CP 1543-1 |
Affected:
All versions < V3.0.22
|
|
| Siemens | SIPLUS NET SCALANCE X308-2 |
Affected:
0 , < V4.1.4
(custom)
|
|
| Siemens | SIPLUS S7-1200 CP 1243-1 |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIPLUS S7-1200 CP 1243-1 RAIL |
Affected:
All versions < V3.3.46
|
|
| Siemens | SIPLUS S7-1200 CPU 1212 AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1212 DC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1212C AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1212C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214 AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214 DC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214C AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214C DC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214FC DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1214FC DC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215 AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215 DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215 DC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215C AC/DC/RLY |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215C DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | SIPLUS S7-1200 CPU 1215FC DC/DC/DC |
Affected:
0 , < V4.5.2
(custom)
|
|
| Siemens | TIA Administrator |
Affected:
0 , < V1.0.7
(custom)
|
Date Public
2021-08-24 00:00
Credits
Ingo Schwarze
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:01:08.180Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.openssl.org/news/secadv/20210824.txt"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12"
},
{
"name": "DSA-4963",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2021/dsa-4963"
},
{
"name": "[tomcat-dev] 20210825 OpenSSL security announcement - do we need a Tomcat Native release?",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210825 OpenSSL SM2 Decryption Buffer Overflow (CVE-2021-3711), Read buffer overruns processing ASN.1 strings (CVE-2021-3712)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/08/26/2"
},
{
"name": "[tomcat-dev] 20210826 Re: OpenSSL security announcement - do we need a Tomcat Native release?",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20210827-0010/"
},
{
"name": "[debian-lts-announce] 20210926 [SECURITY] [DLA 2766-1] openssl security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html"
},
{
"name": "[debian-lts-announce] 20210930 [SECURITY] [DLA 2774-1] openssl1.0 security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2021-16"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2022-02"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
},
{
"tags": [
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf"
},
{
"name": "GLSA-202209-02",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202209-02"
},
{
"name": "GLSA-202210-02",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202210-02"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "BFCClient",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.17",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Industrial Edge - Machine Insight App",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Industrial Edge - PROFINET IO Connector",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V1.1.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM RM1224 LTE(4G) EU",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM RM1224 LTE(4G) NAM",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX MX5000",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX MX5000RE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1400",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1500",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1501",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1510",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1511",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1512",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1524",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX1536",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM ROX RX5000",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.15.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M804PB",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M812-1 ADSL-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M812-1 ADSL-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M816-1 ADSL-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M816-1 ADSL-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M826-2 SHDSL-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M874-2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M874-3",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M876-3",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M876-3 (ROK)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M876-4 (EU)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE M876-4 (NAM)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE MUM853-1 (EU)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V7.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE MUM856-1 (EU)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V7.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE MUM856-1 (RoW)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V7.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE S615 LAN-Router",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V7.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE SC622-2C",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V2.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE SC632-2C",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V2.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE SC636-2C",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V2.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE SC642-2C",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V2.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE SC646-2C",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V2.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1788-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1788-2 EEC M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1788-2 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W1788-2IA M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W721-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W721-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W721-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W721-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W722-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45 (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W734-1 RJ45 (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W738-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W738-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W738-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W738-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W748-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W761-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W761-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W761-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W761-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45 (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W774-1 RJ45 (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12 EEC (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W778-1 M12 EEC (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 SFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 SFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 SFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2 SFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2IA RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2IA RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2IA RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W786-2IA RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-1 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 M12 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE W788-2 RJ45",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V6.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WAM766-1",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WAM766-1 (US)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WAM766-1 EEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WAM766-1 EEC (US)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WUM766-1",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE WUM766-1 (USA)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.2.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X200-4P IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X201-3P IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X201-3P IRT PRO",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X202-2IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X202-2P IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X202-2P IRT PRO",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204-2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204-2FM",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204-2LD",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204-2LD TS",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204-2TS",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204IRT PRO",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X206-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X206-1LD",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X208",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X208PRO",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X212-2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X212-2LD",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X216",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X224",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (230V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (230V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (24V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (2x 230V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (2x 230V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (2x 24V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X302-7 EEC (2x 24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X304-2FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X306-1LD FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (230V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (230V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (24V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (2x 230V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (2x 230V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (2x 24V, coated)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-2 EEC (2x 24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-3",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-3",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-3LD",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X307-3LD",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LD",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LD",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LH",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LH",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LH+",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2LH+",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M PoE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M PoE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M TS",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X308-2M TS",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X310",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X310",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X310FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X310FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X320-1 FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X320-1-2LD FE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X408-2",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF201-3P IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF202-2P IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF204",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF204-2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF204-2BA IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF204IRT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF206-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XF208",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V5.2.6"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (230V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (230V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (230V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (230V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M (24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M TS (24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-12M TS (24V)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M PoE (230V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M PoE (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1242-7 V2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1243-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1243-7 LTE EU",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1243-7 LTE US",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1243-8 IRC",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1542SP-1",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.2.28",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1543-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.0.22"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1543SP-1",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.2.28",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC CP 1545-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V1.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC PCS neo (Administration Console)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.1.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC Process Historian OPC UA Server",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2020 SP1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1211C AC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1211C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1211C DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1212C AC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1212C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1212C DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1212FC DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1212FC DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1214C AC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1214C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1214C DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1214FC DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1214FC DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1215C AC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1215C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1215C DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1215FC DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1215FC DC/DC/Rly",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1200 CPU 1217C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SINEC NMS",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.0 SP3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SINEMA Remote Connect Server",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SINEMA Server V14",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SINUMERIK Operate",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V4.95 SP1"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS ET 200SP CP 1543SP-1 ISEC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.2.28",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.2.28",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS NET CP 1242-7 V2",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS NET CP 1543-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.0.22"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS NET SCALANCE X308-2",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.1.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CP 1243-1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CP 1243-1 RAIL",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.3.46"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212 AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212C AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214 AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214C DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214FC DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1214FC DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215 DC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215C AC/DC/RLY",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215C DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1200 CPU 1215FC DC/DC/DC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.5.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "TIA Administrator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.0.7",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-14T08:57:51.339Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-244969.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-389290.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-028723.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html"
}
],
"x_adpType": "supplier"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2021-3712",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-16T14:11:09.557845Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-16T14:11:16.454Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"status": "affected",
"version": "Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)"
},
{
"status": "affected",
"version": "Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Ingo Schwarze"
}
],
"datePublic": "2021-08-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)."
}
],
"metrics": [
{
"other": {
"content": {
"lang": "eng",
"url": "https://www.openssl.org/policies/secpolicy.html#Moderate",
"value": "Moderate"
},
"type": "unknown"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Buffer overflow",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-21T19:07:21.902Z",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"url": "https://www.openssl.org/news/secadv/20210824.txt"
},
{
"url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11"
},
{
"url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12"
},
{
"name": "DSA-4963",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4963"
},
{
"name": "[tomcat-dev] 20210825 OpenSSL security announcement - do we need a Tomcat Native release?",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210825 OpenSSL SM2 Decryption Buffer Overflow (CVE-2021-3711), Read buffer overruns processing ASN.1 strings (CVE-2021-3712)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2021/08/26/2"
},
{
"name": "[tomcat-dev] 20210826 Re: OpenSSL security announcement - do we need a Tomcat Native release?",
"tags": [
"mailing-list"
],
"url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E"
},
{
"url": "https://security.netapp.com/advisory/ntap-20210827-0010/"
},
{
"name": "[debian-lts-announce] 20210926 [SECURITY] [DLA 2766-1] openssl security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html"
},
{
"name": "[debian-lts-announce] 20210930 [SECURITY] [DLA 2774-1] openssl1.0 security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"url": "https://www.tenable.com/security/tns-2021-16"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"url": "https://www.tenable.com/security/tns-2022-02"
},
{
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf"
},
{
"name": "GLSA-202209-02",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202209-02"
},
{
"name": "GLSA-202210-02",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202210-02"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
}
],
"title": "Read buffer overruns processing ASN.1 strings"
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2021-3712",
"datePublished": "2021-08-24T14:50:14.704Z",
"dateReserved": "2021-08-16T00:00:00.000Z",
"dateUpdated": "2026-04-16T14:11:16.454Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-3712",
"date": "2026-06-04",
"epss": "0.0046",
"percentile": "0.64439"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-3712\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2021-08-24T15:15:09.533\",\"lastModified\":\"2026-04-16T15:16:45.500\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \\\"d2i\\\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \\\"data\\\" and \\\"length\\\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \\\"data\\\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).\"},{\"lang\":\"es\",\"value\":\"Las cadenas ASN.1 se representan internamente en OpenSSL como una estructura ASN1_STRING que contiene un b\u00fafer que contiene los datos de la cadena y un campo que contiene la longitud del b\u00fafer. Esto contrasta con las cadenas C normales, que se representan como un b\u00fafer para los datos de la cadena que termina con un byte NUL (0). Aunque no es un requisito estricto, las cadenas ASN.1 que se analizan usando las propias funciones \\\"d2i\\\" de OpenSSL (y otras funciones de an\u00e1lisis similares), as\u00ed como cualquier cadena cuyo valor ha sido ajustado con la funci\u00f3n ASN1_STRING_set(), terminar\u00e1n adicionalmente con NUL la matriz de bytes en la estructura ASN1_STRING. Sin embargo, es posible que las aplicaciones construyan directamente estructuras ASN1_STRING v\u00e1lidas que no terminen en NUL la matriz de bytes, ajustando directamente los campos \\\"data\\\" y \\\"length\\\" en la matriz ASN1_STRING. Esto tambi\u00e9n puede ocurrir usando la funci\u00f3n ASN1_STRING_set0(). Se ha detectado que numerosas funciones de OpenSSL que imprimen datos ASN.1 asumen que la matriz de bytes ASN1_STRING estar\u00e1 terminada en NUL, aunque esto no est\u00e1 garantizado para las cadenas que han sido construidas directamente. Cuando una aplicaci\u00f3n pide que se imprima una estructura ASN.1, y cuando esa estructura ASN.1 contiene ASN1_STRINGs que han sido construidos directamente por la aplicaci\u00f3n sin terminar en NUL el campo \\\"data\\\", entonces puede ocurrir un desbordamiento del buffer de lectura. Lo mismo puede ocurrir durante el procesamiento de las restricciones de nombre de los certificados (por ejemplo, si un certificado ha sido construido directamente por la aplicaci\u00f3n en lugar de cargarlo por medio de las funciones de an\u00e1lisis de OpenSSL, y el certificado contiene estructuras ASN1_STRING sin terminaci\u00f3n NUL). Tambi\u00e9n puede ocurrir en las funciones X509_get1_email(), X509_REQ_get1_email() y X509_get1_ocsp(). Si un actor malicioso puede hacer que una aplicaci\u00f3n construya directamente un ASN1_STRING y luego lo procese a mediante una de las funciones de OpenSSL afectadas, este problema podr\u00eda ser alcanzado. Esto podr\u00eda resultar en un bloqueo (causando un ataque de Denegaci\u00f3n de Servicio). Tambi\u00e9n podr\u00eda resultar en la revelaci\u00f3n de contenidos de memoria privada (como claves privadas, o texto plano confidencial). Corregido en OpenSSL versi\u00f3n 1.1.1l (Afectada 1.1.1-1.1.1k). Corregido en OpenSSL versi\u00f3n 1.0.2za (Afectada 1.0.2-1.0.2y).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:P\",\"baseScore\":5.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndExcluding\":\"1.0.2za\",\"matchCriteriaId\":\"20353A2F-46B5-4C46-B562-42CD6E2B248B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.1\",\"versionEndExcluding\":\"1.1.1l\",\"matchCriteriaId\":\"A9592A08-7FF0-490F-B684-6EA8E49F36C7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE996B1-6951-4F85-AA58-B99A379D2163\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62347994-1353-497C-9C4A-D5D8D95F67E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndIncluding\":\"11.50.2\",\"matchCriteriaId\":\"433D435D-13D0-4EAA-ACD9-DD88DA712D00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3C19813-E823-456A-B1CE-EC0684CE1953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D39DCAE7-494F-40B2-867F-6C6A077939DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"361B791A-D336-4431-8F68-8135BEFFAEA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_encryption:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D82795C-F1ED-4D2C-B578-75B9EECBB99C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.10.0\",\"matchCriteriaId\":\"A30F7908-5AF6-4761-BC6A-4C18EFAE48E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B00DDE7-7002-45BE-8EDE-65D964922CB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB88C165-BB24-49FB-AAF6-087A766D5AD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DE847E0-431D-497D-9C57-C4E59749F6A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"46385384-5561-40AA-9FDE-A2DE4FDFAD3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E4E5481-1070-4E1F-8679-1985DE4E785A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9EEA681-67FF-43B3-8610-0FA17FD279E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"C33BA8EA-793D-4E79-BE9C-235ACE717216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*\",\"matchCriteriaId\":\"823DBE80-CB8D-4981-AE7C-28F3FDD40451\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.0.0\",\"matchCriteriaId\":\"9E0DE4DE-9454-4E8D-9E00-3CBCDD8C142A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16.0\",\"versionEndIncluding\":\"5.19.1\",\"matchCriteriaId\":\"8D977244-DC29-4301-8D89-0BD01BC328B8\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.1.2.4.047\",\"matchCriteriaId\":\"6A0BD5BD-E2F8-4B4E-B5CF-9787E6F2E4AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"21.0\",\"versionEndExcluding\":\"21.3\",\"matchCriteriaId\":\"3197F464-F0A5-4BD4-9068-65CD448D8F4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15DD67FD-CE98-4556-A036-B2970935AF4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.27\",\"matchCriteriaId\":\"AE23C7E1-F849-411D-850F-A504D4BA3414\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.25\",\"matchCriteriaId\":\"88627B99-16DC-4878-A63A-A40F6FC1F477\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7.0\",\"versionEndIncluding\":\"5.7.35\",\"matchCriteriaId\":\"E667933A-37EA-4BC2-9180-C3B4B7038866\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.0.26\",\"matchCriteriaId\":\"709E83B4-8C66-4255-870B-2F72B37BA8C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.26\",\"matchCriteriaId\":\"EED6C8C2-F986-4CFD-A343-AD2340F850F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E1E416B-920B-49A0-9523-382898C2979D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8AF00C6-B97F-414D-A8DF-057E6BFD8597\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_backup:18.1.0.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8929B61-16EC-4FE0-98A5-1CC7CC7FD9CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.0.1.1\",\"matchCriteriaId\":\"B0F46497-4AB0-49A7-9453-CC26837BF253\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAAB7154-4DE8-4806-86D0-C1D33B84417B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD4349FE-EEF8-489A-8ABF-5FCD55EC6DE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6EAA723-2A23-4151-930B-86ACF9CC1C0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C416FD3-2E2F-4BBC-BD5F-F896825883F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D886339E-EDB2-4879-BD54-1800E4CA9CAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB468FEE-A0F4-49A0-BBEE-10D0733C87D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC5C177E-0C77-48C9-847A-A9E5AA7DBC1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"348EEE70-E114-4720-AAAF-E77DE5C9A2D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DCDD73B-57B1-4580-B922-5662E3AC13B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7015A8CB-8FA6-423E-8307-BD903244F517\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A4E206-56C7-4578-AC9C-088B0C8D9CFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D1E6A38-4CBD-42E9-B2D2-11AEF157822F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.3.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D105A5B-0AA8-4782-B804-CB1384F85884\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.2.6.3\",\"matchCriteriaId\":\"BE34D4F7-5C18-4578-8D0A-722FDF931333\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B1CAD50-749F-4ADB-A046-BF3585677A58\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2021/08/26/2\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202209-02\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202210-02\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210827-0010/\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://www.debian.org/security/2021/dsa-4963\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20210824.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-16\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2022-02\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/08/26/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202209-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202210-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210827-0010/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2021/dsa-4963\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20210824.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2022-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019200.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-028723.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-244969.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-389290.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.openssl.org/news/secadv/20210824.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4963\", \"name\": \"DSA-4963\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E\", \"name\": \"[tomcat-dev] 20210825 OpenSSL security announcement - do we need a Tomcat Native release?\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/08/26/2\", \"name\": \"[oss-security] 20210825 OpenSSL SM2 Decryption Buffer Overflow (CVE-2021-3711), Read buffer overruns processing ASN.1 strings (CVE-2021-3712)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E\", \"name\": \"[tomcat-dev] 20210826 Re: OpenSSL security announcement - do we need a Tomcat Native release?\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210827-0010/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html\", \"name\": \"[debian-lts-announce] 20210926 [SECURITY] [DLA 2766-1] openssl security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html\", \"name\": \"[debian-lts-announce] 20210930 [SECURITY] [DLA 2774-1] openssl1.0 security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.tenable.com/security/tns-2021-16\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.tenable.com/security/tns-2022-02\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202209-02\", \"name\": \"GLSA-202209-02\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202210-02\", \"name\": \"GLSA-202210-02\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240621-0006/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T17:01:08.180Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"BFCClient\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.17\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"Industrial Edge - Machine Insight App\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"Industrial Edge - PROFINET IO Connector\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V1.1.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RM1224 LTE(4G) EU\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RM1224 LTE(4G) NAM\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX MX5000\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX MX5000RE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1400\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1500\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1501\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1510\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1511\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1512\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1524\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX1536\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM ROX RX5000\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.15.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M804PB\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M812-1 ADSL-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M812-1 ADSL-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M816-1 ADSL-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M816-1 ADSL-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M826-2 SHDSL-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M874-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M874-3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M876-3\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M876-3 (ROK)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M876-4 (EU)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE M876-4 (NAM)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE MUM853-1 (EU)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V7.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE MUM856-1 (EU)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V7.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE MUM856-1 (RoW)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V7.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE S615 LAN-Router\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V7.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE SC622-2C\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V2.3\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE SC632-2C\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V2.3\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE SC636-2C\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V2.3\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE SC642-2C\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V2.3\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE SC646-2C\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V2.3\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1788-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1788-2 EEC M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1788-2 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W1788-2IA M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.0.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W721-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W721-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W721-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W721-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W722-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45 (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W734-1 RJ45 (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W738-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W738-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W738-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W738-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W748-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W761-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W761-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W761-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W761-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45 (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W774-1 RJ45 (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12 EEC (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W778-1 M12 EEC (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 SFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 SFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 SFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2 SFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2IA RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2IA RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2IA RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W786-2IA RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-1 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 M12 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE W788-2 RJ45\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V6.6.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WAM766-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WAM766-1 (US)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WAM766-1 EEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WAM766-1 EEC (US)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WUM766-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE WUM766-1 (USA)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X200-4P IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X201-3P IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X201-3P IRT PRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X202-2IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X202-2P IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X202-2P IRT PRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204-2FM\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204-2LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204-2LD TS\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204-2TS\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X204IRT PRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X206-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X206-1LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X208\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X208PRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X212-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X212-2LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X216\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X224\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (230V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (230V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (24V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (2x 230V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (2x 230V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (2x 24V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X302-7 EEC (2x 24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X304-2FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X306-1LD FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (230V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (230V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (24V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (2x 230V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (2x 230V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (2x 24V, coated)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-2 EEC (2x 24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-3\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-3LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X307-3LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LD\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LH\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LH\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LH+\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2LH+\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M PoE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M PoE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M TS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X308-2M TS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X310\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X310\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X310FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X310FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X320-1 FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X320-1-2LD FE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE X408-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF201-3P IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF202-2P IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF204\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF204-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF204-2BA IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF204IRT\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF206-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XF208\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V5.2.6\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (230V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (230V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (230V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (230V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M (24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M TS (24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-12M TS (24V)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M EEC (2x 24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M PoE (230V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M PoE (230V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M PoE (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M PoE (24V, ports on rear)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XR324-4M PoE TS (24V, ports on front)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1242-7 V2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-7 LTE EU\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-7 LTE US\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-8 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1542SP-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.2.28\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1543-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.0.22\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1543SP-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.2.28\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1545-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V1.1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC PCS neo (Administration Console)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.1.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC Process Historian OPC UA Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2020 SP1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1211C AC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1211C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1211C DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1212C AC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1212C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1212C DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1212FC DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1212FC DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1214C AC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1214C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1214C DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1214FC DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1214FC DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1215C AC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1215C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1215C DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1215FC DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1215FC DC/DC/Rly\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1200 CPU 1217C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SINEC NMS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.0 SP3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SINEMA Remote Connect Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SINEMA Server V14\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SINUMERIK Operate\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V4.95 SP1\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS ET 200SP CP 1543SP-1 ISEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.2.28\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.2.28\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET CP 1242-7 V2\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET CP 1543-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.0.22\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET SCALANCE X308-2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.1.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CP 1243-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CP 1243-1 RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions \u003c V3.3.46\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212 AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212C AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214 AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214C DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214FC DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1214FC DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215 DC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215C AC/DC/RLY\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215C DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CPU 1215FC DC/DC/DC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"TIA Administrator\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V1.0.7\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-244969.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-389290.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-028723.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-019200.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-04-14T08:57:51.339Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.4, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-3712\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-16T14:11:09.557845Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125 Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-16T14:10:59.602Z\"}}], \"cna\": {\"title\": \"Read buffer overruns processing ASN.1 strings\", \"credits\": [{\"lang\": \"en\", \"value\": \"Ingo Schwarze\"}], \"metrics\": [{\"other\": {\"type\": \"unknown\", \"content\": {\"url\": \"https://www.openssl.org/policies/secpolicy.html#Moderate\", \"lang\": \"eng\", \"value\": \"Moderate\"}}}], \"affected\": [{\"vendor\": \"OpenSSL\", \"product\": \"OpenSSL\", \"versions\": [{\"status\": \"affected\", \"version\": \"Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)\"}, {\"status\": \"affected\", \"version\": \"Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)\"}]}], \"datePublic\": \"2021-08-24T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.openssl.org/news/secadv/20210824.txt\"}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11\"}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12\"}, {\"url\": \"https://www.debian.org/security/2021/dsa-4963\", \"name\": \"DSA-4963\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E\", \"name\": \"[tomcat-dev] 20210825 OpenSSL security announcement - do we need a Tomcat Native release?\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/08/26/2\", \"name\": \"[oss-security] 20210825 OpenSSL SM2 Decryption Buffer Overflow (CVE-2021-3711), Read buffer overruns processing ASN.1 strings (CVE-2021-3712)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E\", \"name\": \"[tomcat-dev] 20210826 Re: OpenSSL security announcement - do we need a Tomcat Native release?\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210827-0010/\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html\", \"name\": \"[debian-lts-announce] 20210926 [SECURITY] [DLA 2766-1] openssl security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html\", \"name\": \"[debian-lts-announce] 20210930 [SECURITY] [DLA 2774-1] openssl1.0 security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\"}, {\"url\": \"https://www.tenable.com/security/tns-2021-16\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10366\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\"}, {\"url\": \"https://www.tenable.com/security/tns-2022-02\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf\"}, {\"url\": \"https://security.gentoo.org/glsa/202209-02\", \"name\": \"GLSA-202209-02\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202210-02\", \"name\": \"GLSA-202210-02\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240621-0006/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \\\"d2i\\\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \\\"data\\\" and \\\"length\\\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \\\"data\\\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Buffer overflow\"}]}], \"providerMetadata\": {\"orgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"shortName\": \"openssl\", \"dateUpdated\": \"2024-06-21T19:07:21.902Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2021-3712\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-16T14:11:16.454Z\", \"dateReserved\": \"2021-08-16T00:00:00.000Z\", \"assignerOrgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"datePublished\": \"2021-08-24T14:50:14.704Z\", \"assignerShortName\": \"openssl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
NCSC-2025-0336
Vulnerability from csaf_ncscnl - Published: 2025-10-23 13:49 - Updated: 2025-10-23 13:49Summary
Kwetsbaarheden verholpen in Oracle Hyperion
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Hyperion, waaronder Hyperion Financial Management en Hyperion Data Relationship Management.
Interpretaties: De kwetsbaarheden in Oracle Hyperion stellen ongeauthenticeerde aanvallers in staat om toegang te krijgen tot het systeem, wat kan leiden tot ongeautoriseerde gegevensaccess en manipulatie. Specifieke kwetsbaarheden zijn geclassificeerd met een CVSS-score van 6.1 tot 8.8, wat wijst op hun kritieke aard. Daarnaast zijn er kwetsbaarheden die Denial-of-Service (DoS) aanvallen mogelijk maken, met een CVSS-score van 7.5.
Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-125: Out-of-bounds Read
CWE-284: Improper Access Control
CWE-404: Improper Resource Shutdown or Release
CWE-416: Use After Free
CWE-770: Allocation of Resources Without Limits or Throttling
OpenSSL and various Oracle products exhibit vulnerabilities related to ASN.1 string processing and unauthorized access, with specific versions addressing critical security issues and CVSS scores indicating significant risk.
7.4 (High)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Calculation Manager
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Data Relationship Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Infrastructure Technology
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Planning
|
vers:unknown/* |
Multiple Oracle products, including Financial Services, Communications, and Hyperion, have vulnerabilities that can be exploited by remote attackers, with varying damage ratings from medium to high based on the CVSS Impact Matrix.
9.8 (Critical)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Calculation Manager
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Data Relationship Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Infrastructure Technology
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Planning
|
vers:unknown/* |
Recent vulnerabilities in Oracle Hyperion Data Relationship Management and jquery-validation expose systems to unauthorized access and Cross-site Scripting attacks, with a CVSS score of 6.1 for the former.
6.1 (Medium)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Calculation Manager
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Data Relationship Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Infrastructure Technology
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Planning
|
vers:unknown/* |
Recent updates to Apache Commons BeanUtils address multiple vulnerabilities, including arbitrary code execution risks and unauthorized access to Java enum properties, affecting versions prior to 1.11.0 and 2.0.0-M2.
8.8 (High)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Calculation Manager
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Data Relationship Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Infrastructure Technology
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Planning
|
vers:unknown/* |
Multiple vulnerabilities affecting Oracle Application Testing Suite and Apache Commons FileUpload, including DoS risks due to insufficient multipart header limits, have been identified, with CVSS scores reaching 7.5.
7.5 (High)
Affected products
Known affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Calculation Manager
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Data Relationship Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Financial Management
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Infrastructure Technology
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Hyperion Planning
|
vers:unknown/* |
References
6 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Hyperion, waaronder Hyperion Financial Management en Hyperion Data Relationship Management.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Oracle Hyperion stellen ongeauthenticeerde aanvallers in staat om toegang te krijgen tot het systeem, wat kan leiden tot ongeautoriseerde gegevensaccess en manipulatie. Specifieke kwetsbaarheden zijn geclassificeerd met een CVSS-score van 6.1 tot 8.8, wat wijst op hun kritieke aard. Daarnaast zijn er kwetsbaarheden die Denial-of-Service (DoS) aanvallen mogelijk maken, met een CVSS-score van 7.5.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://www.oracle.com/security-alerts/cpuoct2025.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Hyperion",
"tracking": {
"current_release_date": "2025-10-23T13:49:44.344049Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2025-0336",
"initial_release_date": "2025-10-23T13:49:44.344049Z",
"revision_history": [
{
"date": "2025-10-23T13:49:44.344049Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Hyperion Financial Management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Oracle Hyperion Calculation Manager"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Oracle Hyperion Data Relationship Management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "Oracle Hyperion Financial Management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "Oracle Hyperion Infrastructure Technology"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "Oracle Hyperion Planning"
}
],
"category": "vendor",
"name": "Oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "OpenSSL and various Oracle products exhibit vulnerabilities related to ASN.1 string processing and unauthorized access, with specific versions addressing critical security issues and CVSS scores indicating significant risk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-3712 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-3712.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
}
],
"title": "CVE-2021-3712"
},
{
"cve": "CVE-2024-23807",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple Oracle products, including Financial Services, Communications, and Hyperion, have vulnerabilities that can be exploited by remote attackers, with varying damage ratings from medium to high based on the CVSS Impact Matrix.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-23807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-23807.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
}
],
"title": "CVE-2024-23807"
},
{
"cve": "CVE-2025-3573",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Recent vulnerabilities in Oracle Hyperion Data Relationship Management and jquery-validation expose systems to unauthorized access and Cross-site Scripting attacks, with a CVSS score of 6.1 for the former.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-3573 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-3573.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
}
],
"title": "CVE-2025-3573"
},
{
"cve": "CVE-2025-48734",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "Recent updates to Apache Commons BeanUtils address multiple vulnerabilities, including arbitrary code execution risks and unauthorized access to Java enum properties, affecting versions prior to 1.11.0 and 2.0.0-M2.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-48734 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48734.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
}
],
"title": "CVE-2025-48734"
},
{
"cve": "CVE-2025-48976",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities affecting Oracle Application Testing Suite and Apache Commons FileUpload, including DoS risks due to insufficient multipart header limits, have been identified, with CVSS scores reaching 7.5.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-48976 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-48976.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6"
]
}
],
"title": "CVE-2025-48976"
}
]
}
NCSC-2026-0112
Vulnerability from csaf_ncscnl - Published: 2026-04-14 11:37 - Updated: 2026-04-14 11:37Summary
Kwetsbaarheden verholpen in Siemens producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Analytics Toolkit, Ruggedcom, Industrial Edge Management Pro, SIDIS en TPM.
Interpretaties: De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- (Remote) code execution (root/admin rechten)
- Toegang tot systeemgegevens
- Verhogen van rechten
Voor succesvol misbruik van de genoemde kwetsbaarheden moet de kwaadwillende toegang hebben tot de productie-omgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen: Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-99: Improper Control of Resource Identifiers ('Resource Injection')
CWE-125: Out-of-bounds Read
CWE-197: Numeric Truncation Error
CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control
CWE-287: Improper Authentication
CWE-290: Authentication Bypass by Spoofing
CWE-295: Improper Certificate Validation
CWE-305: Authentication Bypass by Primary Weakness
CWE-306: Missing Authentication for Critical Function
CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-345: Insufficient Verification of Data Authenticity
CWE-346: Origin Validation Error
CWE-347: Improper Verification of Cryptographic Signature
CWE-354: Improper Validation of Integrity Check Value
CWE-400: Uncontrolled Resource Consumption
CWE-639: Authorization Bypass Through User-Controlled Key
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-829: Inclusion of Functionality from Untrusted Control Sphere
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-862: Missing Authorization
CWE-863: Incorrect Authorization
Multiple SUSE Linux Enterprise kernel updates across versions 11, 12, and 15 addressed critical security vulnerabilities including use-after-free, heap overflows, race conditions, side-channel leaks, and Wi-Fi protocol flaws, alongside extensive non-security bug fixes.
CWE-306 - Missing Authentication for Critical FunctionAffected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple security vulnerabilities affecting NetBSD and various SUSE Linux Enterprise kernel versions include flaws in BPF verifier, Bluetooth, Wi-Fi fragmentation, heap overflows, use-after-free bugs, and EAPOL frame handling, with extensive non-security fixes across drivers and subsystems.
5.3 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple vulnerabilities in WiFi protocols and drivers, including IEEE 802.11, ALFA Windows 10 driver 6.1316.1209 for AWUS036H, and Linux kernel implementations, allow attackers to inject arbitrary plaintext frames into protected networks across WPA3 and earlier standards.
6.5 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple security vulnerabilities including Wi-Fi fragmentation flaws, use-after-free, denial-of-service, BPF verifier bugs, heap overflows, and race conditions have been addressed across various SUSE Linux Enterprise kernel updates and an ALFA Windows 10 driver for AWUS036H, impacting WPA/WPA2 networks and kernel stability.
6.5 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple vulnerabilities in Linux kernel, ALFA Windows 10 driver for AWUS036ACH, and IEEE 802.11 protocols allow attackers to inject malicious WiFi frames and exfiltrate data across WEP, CCMP, GCMP, WPA3, and protected networks.
6.5 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple vulnerabilities affect Samsung Galaxy S3 i9305 devices, Linux kernel WiFi implementations, and Windows Wireless Networking, allowing attackers to inject or spoof network packets by exploiting acceptance of plaintext A-MSDU frames with valid RFC1042 headers for EAPOL.
6.5 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple vulnerabilities in WiFi implementations, including IEEE 802.11 standards and specific devices like Samsung Galaxy S3 i9305 on Android 4.4.4, allow attackers to inject malicious frames and exfiltrate data via fragmented frame reassembly flaws affecting WEP, WPA, WPA2, WPA3, CCMP, and GCMP protocols.
5.3 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple SUSE Linux Enterprise kernel updates across versions 12, 15, and LTSS address critical security vulnerabilities including use-after-free, heap overflows, race conditions, and Wi-Fi protocol flaws, alongside extensive non-security bug fixes.
5.4 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple OpenSSL versions prior to 1.1.1l and 1.0.2za contain buffer overrun and memory disclosure vulnerabilities in ASN.1 string processing, affecting various products including Oracle Siebel CRM, Oracle Communications, NetApp, HPE, and Solarwinds, with CVSS scores up to 7.4.
7.4 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A critical vulnerability in OpenSSL's BN_mod_sqrt() function causes infinite loops when parsing crafted certificates with invalid elliptic curve parameters, leading to denial of service across multiple OpenSSL versions and affecting various products including Node.js, Oracle, SAP, and NetApp.
7.5 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in the web interface's change password function allows low privileged users on affected devices to escalate their privileges.
CWE-862 - Missing AuthorizationAffected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Siemens products including SCALANCE, SICAM, Tecnomatix, SITOP, and PowerSys contain vulnerabilities allowing authenticated remote attackers with administrative privileges to inject code or gain root shell access due to improper input sanitization.
9.1 (Critical)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Affected devices improperly handle SSL/TLS renegotiation, allowing unauthenticated remote attackers to bypass TCP brute force protections and cause denial of service during the attack.
CWE-770 - Allocation of Resources Without Limits or ThrottlingAffected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Affected devices improperly sanitize user input in their web interface, enabling an authenticated remote attacker with administrative privileges to execute a DOM-based cross-site scripting (XSS) attack.
CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple Siemens RUGGEDCOM and SCALANCE devices below versions V8.0 or V2.4.0 contain vulnerabilities allowing authenticated admin users to execute code or spawn root shells due to improper input sanitization, related to CVE-2022-36323.
9.1 (Critical)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Multiple vulnerabilities affect the TCG TPM2.0 Reference implementation's CryptHmacSign function and various HPE servers, including local denial of service and out-of-bounds read issues, as detailed in Intel Security Advisory INTEL-SA-01209 and TCG advisories.
6.6 (Medium)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
Critical vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository and Oracle Siebel CRM Cloud Applications allow unauthenticated attackers full system compromise, while multiple SQLite and MySQL flaws affect NetApp and other vendors, causing memory corruption and potential data breaches.
9.8 (Critical)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in multiple Siemens software products allows unauthenticated remote attackers to conduct man-in-the-middle attacks by exploiting improper validation of client certificates when connecting to the Analytics Service endpoint.
CWE-295 - Improper Certificate ValidationAffected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in SINEC NMS versions prior to V4.0 SP3 with UMC allows unauthenticated remote attackers to bypass authentication due to insufficient user identity validation in the UMC component.
7.3 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in SINEC NMS versions prior to V4.0 SP3 enables an authenticated remote attacker to bypass authorization controls and reset any user account password.
8.8 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) before version 5.8 allows authenticated User Administrators to escalate privileges and gain access to any device group at any access level.
8.8 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
A vulnerability in Industrial Edge Management Pro and Virtual allows unauthenticated remote attackers to bypass authentication and impersonate users by exploiting improperly enforced authentication on remote device connections when the feature is enabled and connection details are known.
7.1 (High)
Affected products
Known affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / 6AG1206-2BB00-7AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1206-2Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1208-0Ba00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6Ag1216-4Bs00-7Ac2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2GF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5204-0BA00-2YF2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BB00-2TB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5205-3BF00-2TB2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2BD00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2GS00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5206-2RS00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AB2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0BA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2AC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2FC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5208-0GA00-2TC2 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5632-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5646-2GS00-2AC2 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5721-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5722-1FC00-0AB0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / 6GK5734-1FX00-0AA0 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / BFCClient
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE EU Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-7 LTE US Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1243-8 IRC Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / CP 1542SP-1 Firmware (OS)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Machine Insight App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - OPC UA Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Opc Ua Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - PROFINET IO Connector
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - SIMATIC S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge - Simatic S7 Connector App
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Pro V2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Industrial Edge Management Virtual
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Open PCS 7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V8.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.0
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / OpenPCS 7 V9.1
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / ROX II Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM CROSSBOW Station Access Controller (SAC)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RM1224 LTE4G
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX MX5000RE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1400
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1500 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1510 FIRMWARE
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1511
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1524 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX1536
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM ROX RX5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / RUGGEDCOM RX1400 (Firmware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Eu
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rm1224 Lte Nam
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Mx5000
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1500
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1501
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Ruggedcom Rox Rx1512
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M816-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M826-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M874-2 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-3 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE M876-4 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE MUM856-1 (Hardware)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE S615
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC-600 Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SCALANCE SC622-2C
|
vers:unknown/* |
References
30 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Analytics Toolkit, Ruggedcom, Industrial Edge Management Pro, SIDIS en TPM.\n\n\n",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- (Remote) code execution (root/admin rechten)\n- Toegang tot systeemgegevens\n- Verhogen van rechten\n\nVoor succesvol misbruik van de genoemde kwetsbaarheden moet de kwaadwillende toegang hebben tot de productie-omgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "general",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Numeric Truncation Error",
"title": "CWE-197"
},
{
"category": "general",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "general",
"text": "Authentication Bypass by Spoofing",
"title": "CWE-290"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Authentication Bypass by Primary Weakness",
"title": "CWE-305"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "general",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "general",
"text": "Insufficient Verification of Data Authenticity",
"title": "CWE-345"
},
{
"category": "general",
"text": "Origin Validation Error",
"title": "CWE-346"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Inclusion of Functionality from Untrusted Control Sphere",
"title": "CWE-829"
},
{
"category": "general",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-225816.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-605717.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-609469.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-628843.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-741509.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-801704.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-981622.html"
}
],
"title": "Kwetsbaarheden verholpen in Siemens producten",
"tracking": {
"current_release_date": "2026-04-14T11:37:21.682429Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0112",
"initial_release_date": "2026-04-14T11:37:21.682429Z",
"revision_history": [
{
"date": "2026-04-14T11:37:21.682429Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "6AG1206-2BB00-7AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "6Ag1206-2Bs00-7Ac2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "6Ag1208-0Ba00-7Ac2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "6Ag1216-4Bs00-7Ac2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "6GK5204-0BA00-2GF2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "6GK5204-0BA00-2YF2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "6GK5205-3BB00-2AB2 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "6GK5205-3BB00-2AB2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "6GK5205-3BB00-2TB2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "6GK5205-3BF00-2TB2 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "6GK5206-2BD00-2AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "6GK5206-2GS00-2AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "6GK5206-2GS00-2TC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "6GK5206-2RS00-2AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "6GK5208-0BA00-2AB2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "6GK5208-0BA00-2AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "6GK5208-0BA00-2FC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-18"
}
}
],
"category": "product_name",
"name": "6GK5208-0GA00-2AC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-19"
}
}
],
"category": "product_name",
"name": "6GK5208-0GA00-2FC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-20"
}
}
],
"category": "product_name",
"name": "6GK5208-0GA00-2TC2 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-21"
}
}
],
"category": "product_name",
"name": "6GK5632-2GS00-2AC2 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-22"
}
}
],
"category": "product_name",
"name": "6GK5646-2GS00-2AC2 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-23"
}
}
],
"category": "product_name",
"name": "6GK5721-1FC00-0AB0 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-24"
}
}
],
"category": "product_name",
"name": "6GK5722-1FC00-0AB0 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-25"
}
}
],
"category": "product_name",
"name": "6GK5734-1FX00-0AA0 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-26"
}
}
],
"category": "product_name",
"name": "BFCClient"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-27"
}
}
],
"category": "product_name",
"name": "CP 1243-1 Firmware (OS)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-28"
}
}
],
"category": "product_name",
"name": "CP 1243-7 LTE EU Firmware (OS)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-29"
}
}
],
"category": "product_name",
"name": "CP 1243-7 LTE US Firmware (OS)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-30"
}
}
],
"category": "product_name",
"name": "CP 1243-8 IRC Firmware (OS)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-31"
}
}
],
"category": "product_name",
"name": "CP 1542SP-1 Firmware (OS)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-32"
}
}
],
"category": "product_name",
"name": "Industrial Edge - Machine Insight App"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-33"
}
}
],
"category": "product_name",
"name": "Industrial Edge - OPC UA Connector"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-34"
}
}
],
"category": "product_name",
"name": "Industrial Edge - Opc Ua Connector"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-35"
}
}
],
"category": "product_name",
"name": "Industrial Edge - PROFINET IO Connector"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-36"
}
}
],
"category": "product_name",
"name": "Industrial Edge - SIMATIC S7 Connector App"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-37"
}
}
],
"category": "product_name",
"name": "Industrial Edge - Simatic S7 Connector App"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-38"
}
}
],
"category": "product_name",
"name": "Industrial Edge Management"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-39"
}
}
],
"category": "product_name",
"name": "Industrial Edge Management Pro V1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-40"
}
}
],
"category": "product_name",
"name": "Industrial Edge Management Pro V2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-41"
}
}
],
"category": "product_name",
"name": "Industrial Edge Management Virtual"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-42"
}
}
],
"category": "product_name",
"name": "Open PCS 7"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-43"
}
}
],
"category": "product_name",
"name": "OpenPCS 7 V8.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-44"
}
}
],
"category": "product_name",
"name": "OpenPCS 7 V9.0"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-45"
}
}
],
"category": "product_name",
"name": "OpenPCS 7 V9.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-46"
}
}
],
"category": "product_name",
"name": "ROX II Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-47"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-48"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM CROSSBOW Station Access Controller (SAC)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-49"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-50"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) EU"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-51"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-52"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) NAM"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-53"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-54"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RM1224 LTE4G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-55"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX MX5000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-56"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX MX5000RE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-57"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1400"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-58"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1500"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-59"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1500 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-60"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1501"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-61"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1510"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-62"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1510 FIRMWARE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-63"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1511"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-64"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1512"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-65"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1524"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-66"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1524 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-67"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX1536"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-68"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM ROX RX5000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-69"
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RX1400 (Firmware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-70"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rm1224 Lte Eu"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-71"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rm1224 Lte Nam"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-72"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rox Mx5000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-73"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rox Rx1500"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-74"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rox Rx1501"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-75"
}
}
],
"category": "product_name",
"name": "Ruggedcom Rox Rx1512"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-76"
}
}
],
"category": "product_name",
"name": "SCALANCE M816-1 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-77"
}
}
],
"category": "product_name",
"name": "SCALANCE M826-2 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-78"
}
}
],
"category": "product_name",
"name": "SCALANCE M874-2 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-79"
}
}
],
"category": "product_name",
"name": "SCALANCE M876-3 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-80"
}
}
],
"category": "product_name",
"name": "SCALANCE M876-4 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-81"
}
}
],
"category": "product_name",
"name": "SCALANCE MUM856-1 (Hardware)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-82"
}
}
],
"category": "product_name",
"name": "SCALANCE S615"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-83"
}
}
],
"category": "product_name",
"name": "SCALANCE SC-600 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-84"
}
}
],
"category": "product_name",
"name": "SCALANCE SC622-2C"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-24588",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "other",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Multiple SUSE Linux Enterprise kernel updates across versions 11, 12, and 15 addressed critical security vulnerabilities including use-after-free, heap overflows, race conditions, side-channel leaks, and Wi-Fi protocol flaws, alongside extensive non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-24588 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-24588.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-24588"
},
{
"cve": "CVE-2020-26139",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"notes": [
{
"category": "other",
"text": "Inclusion of Functionality from Untrusted Control Sphere",
"title": "CWE-829"
},
{
"category": "description",
"text": "Multiple security vulnerabilities affecting NetBSD and various SUSE Linux Enterprise kernel versions include flaws in BPF verifier, Bluetooth, Wi-Fi fragmentation, heap overflows, use-after-free bugs, and EAPOL frame handling, with extensive non-security fixes across drivers and subsystems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26139 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26139.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26139"
},
{
"cve": "CVE-2020-26140",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"notes": [
{
"category": "other",
"text": "Origin Validation Error",
"title": "CWE-346"
},
{
"category": "other",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Multiple vulnerabilities in WiFi protocols and drivers, including IEEE 802.11, ALFA Windows 10 driver 6.1316.1209 for AWUS036H, and Linux kernel implementations, allow attackers to inject arbitrary plaintext frames into protected networks across WPA3 and earlier standards.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26140 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26140.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26140"
},
{
"cve": "CVE-2020-26141",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "description",
"text": "Multiple security vulnerabilities including Wi-Fi fragmentation flaws, use-after-free, denial-of-service, BPF verifier bugs, heap overflows, and race conditions have been addressed across various SUSE Linux Enterprise kernel updates and an ALFA Windows 10 driver for AWUS036H, impacting WPA/WPA2 networks and kernel stability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26141 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26141.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26141"
},
{
"cve": "CVE-2020-26143",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"notes": [
{
"category": "other",
"text": "Origin Validation Error",
"title": "CWE-346"
},
{
"category": "other",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Linux kernel, ALFA Windows 10 driver for AWUS036ACH, and IEEE 802.11 protocols allow attackers to inject malicious WiFi frames and exfiltrate data across WEP, CCMP, GCMP, WPA3, and protected networks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26143 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26143.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26143"
},
{
"cve": "CVE-2020-26144",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Spoofing",
"title": "CWE-290"
},
{
"category": "description",
"text": "Multiple vulnerabilities affect Samsung Galaxy S3 i9305 devices, Linux kernel WiFi implementations, and Windows Wireless Networking, allowing attackers to inject or spoof network packets by exploiting acceptance of plaintext A-MSDU frames with valid RFC1042 headers for EAPOL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26144 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26144.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26144"
},
{
"cve": "CVE-2020-26146",
"cwe": {
"id": "CWE-307",
"name": "Improper Restriction of Excessive Authentication Attempts"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "other",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "description",
"text": "Multiple vulnerabilities in WiFi implementations, including IEEE 802.11 standards and specific devices like Samsung Galaxy S3 i9305 on Android 4.4.4, allow attackers to inject malicious frames and exfiltrate data via fragmented frame reassembly flaws affecting WEP, WPA, WPA2, WPA3, CCMP, and GCMP protocols.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26146 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26146.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26146"
},
{
"cve": "CVE-2020-26147",
"cwe": {
"id": "CWE-307",
"name": "Improper Restriction of Excessive Authentication Attempts"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "other",
"text": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
"title": "CWE-99"
},
{
"category": "description",
"text": "Multiple SUSE Linux Enterprise kernel updates across versions 12, 15, and LTSS address critical security vulnerabilities including use-after-free, heap overflows, race conditions, and Wi-Fi protocol flaws, alongside extensive non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26147 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-26147.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2020-26147"
},
{
"cve": "CVE-2021-3712",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Multiple OpenSSL versions prior to 1.1.1l and 1.0.2za contain buffer overrun and memory disclosure vulnerabilities in ASN.1 string processing, affecting various products including Oracle Siebel CRM, Oracle Communications, NetApp, HPE, and Solarwinds, with CVSS scores up to 7.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-3712 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-3712.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2021-3712"
},
{
"cve": "CVE-2022-0778",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "other",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "description",
"text": "A critical vulnerability in OpenSSL\u0027s BN_mod_sqrt() function causes infinite loops when parsing crafted certificates with invalid elliptic curve parameters, leading to denial of service across multiple OpenSSL versions and affecting various products including Node.js, Oracle, SAP, and NetApp.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0778 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0778.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2022-0778"
},
{
"cve": "CVE-2022-31765",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "A vulnerability in the web interface\u0027s change password function allows low privileged users on affected devices to escalate their privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-31765 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-31765.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2022-31765"
},
{
"cve": "CVE-2022-36323",
"notes": [
{
"category": "description",
"text": "Siemens products including SCALANCE, SICAM, Tecnomatix, SITOP, and PowerSys contain vulnerabilities allowing authenticated remote attackers with administrative privileges to inject code or gain root shell access due to improper input sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-36323 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-36323.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2022-36323"
},
{
"cve": "CVE-2022-36324",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Affected devices improperly handle SSL/TLS renegotiation, allowing unauthenticated remote attackers to bypass TCP brute force protections and cause denial of service during the attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-36324 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-36324.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2022-36324"
},
{
"cve": "CVE-2022-36325",
"cwe": {
"id": "CWE-80",
"name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "description",
"text": "Affected devices improperly sanitize user input in their web interface, enabling an authenticated remote attacker with administrative privileges to execute a DOM-based cross-site scripting (XSS) attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-36325 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-36325.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2022-36325"
},
{
"cve": "CVE-2023-44373",
"notes": [
{
"category": "description",
"text": "Multiple Siemens RUGGEDCOM and SCALANCE devices below versions V8.0 or V2.4.0 contain vulnerabilities allowing authenticated admin users to execute code or spawn root shells due to improper input sanitization, related to CVE-2022-36323.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-44373 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-44373.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2023-44373"
},
{
"cve": "CVE-2025-2884",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Multiple vulnerabilities affect the TCG TPM2.0 Reference implementation\u0027s CryptHmacSign function and various HPE servers, including local denial of service and out-of-bounds read issues, as detailed in Intel Security Advisory INTEL-SA-01209 and TCG advisories.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-2884 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-2884.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2025-2884"
},
{
"cve": "CVE-2025-6965",
"cwe": {
"id": "CWE-197",
"name": "Numeric Truncation Error"
},
"notes": [
{
"category": "other",
"text": "Numeric Truncation Error",
"title": "CWE-197"
},
{
"category": "description",
"text": "Critical vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository and Oracle Siebel CRM Cloud Applications allow unauthenticated attackers full system compromise, while multiple SQLite and MySQL flaws affect NetApp and other vendors, causing memory corruption and potential data breaches.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-6965 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-6965.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2025-6965"
},
{
"cve": "CVE-2025-40745",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in multiple Siemens software products allows unauthenticated remote attackers to conduct man-in-the-middle attacks by exploiting improper validation of client certificates when connecting to the Analytics Service endpoint.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40745 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40745.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2025-40745"
},
{
"cve": "CVE-2026-24032",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "A vulnerability in SINEC NMS versions prior to V4.0 SP3 with UMC allows unauthenticated remote attackers to bypass authentication due to insufficient user identity validation in the UMC component.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-24032 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-24032.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2026-24032"
},
{
"cve": "CVE-2026-25654",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"notes": [
{
"category": "other",
"text": "Authorization Bypass Through User-Controlled Key",
"title": "CWE-639"
},
{
"category": "description",
"text": "A vulnerability in SINEC NMS versions prior to V4.0 SP3 enables an authenticated remote attacker to bypass authorization controls and reset any user account password.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-25654 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-25654.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2026-25654"
},
{
"cve": "CVE-2026-27668",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"notes": [
{
"category": "other",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) before version 5.8 allows authenticated User Administrators to escalate privileges and gain access to any device group at any access level.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-27668 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-27668.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2026-27668"
},
{
"cve": "CVE-2026-33892",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Primary Weakness",
"title": "CWE-305"
},
{
"category": "description",
"text": "A vulnerability in Industrial Edge Management Pro and Virtual allows unauthenticated remote attackers to bypass authentication and impersonate users by exploiting improperly enforced authentication on remote device connections when the feature is enabled and connection details are known.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-33892 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33892.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32",
"CSAFPID-33",
"CSAFPID-34",
"CSAFPID-35",
"CSAFPID-36",
"CSAFPID-37",
"CSAFPID-38",
"CSAFPID-39",
"CSAFPID-40",
"CSAFPID-41",
"CSAFPID-42",
"CSAFPID-43",
"CSAFPID-44",
"CSAFPID-45",
"CSAFPID-46",
"CSAFPID-47",
"CSAFPID-48",
"CSAFPID-49",
"CSAFPID-50",
"CSAFPID-51",
"CSAFPID-52",
"CSAFPID-53",
"CSAFPID-54",
"CSAFPID-55",
"CSAFPID-56",
"CSAFPID-57",
"CSAFPID-58",
"CSAFPID-59",
"CSAFPID-60",
"CSAFPID-61",
"CSAFPID-62",
"CSAFPID-63",
"CSAFPID-64",
"CSAFPID-65",
"CSAFPID-66",
"CSAFPID-67",
"CSAFPID-68",
"CSAFPID-69",
"CSAFPID-70",
"CSAFPID-71",
"CSAFPID-72",
"CSAFPID-73",
"CSAFPID-74",
"CSAFPID-75",
"CSAFPID-76",
"CSAFPID-77",
"CSAFPID-78",
"CSAFPID-79",
"CSAFPID-80",
"CSAFPID-81",
"CSAFPID-82",
"CSAFPID-83",
"CSAFPID-84"
]
}
],
"title": "CVE-2026-33892"
}
]
}
OPENSUSE-SU-2021:1188-1
Vulnerability from csaf_opensuse - Published: 2021-08-25 04:52 - Updated: 2021-08-25 04:52Summary
Security update for openssl-1_1
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following security issues:
- CVE-2021-3711: A bug in the implementation of the SM2 decryption code
could lead to buffer overflows. [bsc#1189520]
- CVE-2021-3712: a bug in the code for printing certificate details could
lead to a buffer overrun that a malicious actor could exploit to crash
the application, causing a denial-of-service attack. [bsc#1189521]
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames: openSUSE-2021-1188
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.8 (Critical)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following security issues:\n\n- CVE-2021-3711: A bug in the implementation of the SM2 decryption code\n could lead to buffer overflows. [bsc#1189520]\n\n- CVE-2021-3712: a bug in the code for printing certificate details could\n lead to a buffer overrun that a malicious actor could exploit to crash\n the application, causing a denial-of-service attack. [bsc#1189521]\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1188",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1188-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1188-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YXBKWFNVQ5GSDMIZHMMOGHRWWUOWZMJE/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1188-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YXBKWFNVQ5GSDMIZHMMOGHRWWUOWZMJE/"
},
{
"category": "self",
"summary": "SUSE Bug 1189520",
"url": "https://bugzilla.suse.com/1189520"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3711 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2021-08-25T04:52:31Z",
"generator": {
"date": "2021-08-25T04:52:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1188-1",
"initial_release_date": "2021-08-25T04:52:31Z",
"revision_history": [
{
"date": "2021-08-25T04:52:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"product": {
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"product_id": "libopenssl1_1-1.1.1d-lp152.7.21.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"product": {
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"product_id": "openssl-1_1-1.1.1d-lp152.7.21.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"product_id": "openssl-1_1-1.1.1d-lp152.7.21.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586"
},
"product_reference": "libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586"
},
"product_reference": "openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-lp152.7.21.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
},
"product_reference": "openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3711"
}
],
"notes": [
{
"category": "general",
"text": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3711",
"url": "https://www.suse.com/security/cve/CVE-2021-3711"
},
{
"category": "external",
"summary": "SUSE Bug 1189520 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1189520"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1205663 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1205663"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-25T04:52:31Z",
"details": "critical"
}
],
"title": "CVE-2021-3711"
},
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.21.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-25T04:52:31Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:1189-1
Vulnerability from csaf_opensuse - Published: 2021-08-25 04:52 - Updated: 2021-08-25 04:52Summary
Security update for openssl-1_0_0
Severity
Important
Notes
Title of the patch: Security update for openssl-1_0_0
Description of the patch: This update for openssl-1_0_0 fixes the following issues:
- CVE-2021-3712: a bug in the code for printing certificate details could lead
to a buffer overrun that a malicious actor could exploit to crash the
application, causing a denial-of-service attack. [bsc#1189521]
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames: openSUSE-2021-1189
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_0_0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2021-3712: a bug in the code for printing certificate details could lead\n to a buffer overrun that a malicious actor could exploit to crash the\n application, causing a denial-of-service attack. [bsc#1189521]\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1189",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1189-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1189-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JJMNXN2ETVF67Q4UKMXBSCF2LIA5HVUH/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1189-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JJMNXN2ETVF67Q4UKMXBSCF2LIA5HVUH/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_0_0",
"tracking": {
"current_release_date": "2021-08-25T04:52:34Z",
"generator": {
"date": "2021-08-25T04:52:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1189-1",
"initial_release_date": "2021-08-25T04:52:34Z",
"revision_history": [
{
"date": "2021-08-25T04:52:34Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "libopenssl10-1.0.2p-lp152.8.15.1.i586",
"product_id": "libopenssl10-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"product_id": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"product_id": "openssl-1_0_0-1.0.2p-lp152.8.15.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch",
"product": {
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch",
"product_id": "openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl10-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "libopenssl10-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.15.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.15.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-25T04:52:34Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:1248-1
Vulnerability from csaf_opensuse - Published: 2021-09-12 14:06 - Updated: 2021-09-12 14:06Summary
Security update for openssl-1_1
Severity
Low
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following issues:
- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712.
Read buffer overruns processing ASN.1 strings (bsc#1189521).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames: openSUSE-2021-1248
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. \n Read buffer overruns processing ASN.1 strings (bsc#1189521).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1248",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1248-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1248-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BTAMI3TGUD3BTSIO4MHIHCP2H4HJWRWI/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1248-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BTAMI3TGUD3BTSIO4MHIHCP2H4HJWRWI/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2021-09-12T14:06:10Z",
"generator": {
"date": "2021-09-12T14:06:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1248-1",
"initial_release_date": "2021-09-12T14:06:10Z",
"revision_history": [
{
"date": "2021-09-12T14:06:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"product": {
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"product_id": "libopenssl1_1-1.1.1d-lp152.7.24.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"product": {
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"product_id": "openssl-1_1-1.1.1d-lp152.7.24.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"product_id": "openssl-1_1-1.1.1d-lp152.7.24.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.i586"
},
"product_reference": "libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.i586"
},
"product_reference": "openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-lp152.7.24.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch"
},
"product_reference": "openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.i586",
"openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.24.1.x86_64",
"openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.24.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-09-12T14:06:10Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:1261-1
Vulnerability from csaf_opensuse - Published: 2021-09-14 12:07 - Updated: 2021-09-14 12:07Summary
Security update for openssl-1_0_0
Severity
Low
Notes
Title of the patch: Security update for openssl-1_0_0
Description of the patch: This update for openssl-1_0_0 fixes the following issues:
- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712.
Read buffer overruns processing ASN.1 strings (bsc#1189521).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames: openSUSE-2021-1261
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_0_0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. \n Read buffer overruns processing ASN.1 strings (bsc#1189521).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1261",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1261-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1261-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE6BERTPDDZTU2D7PHOS5VANHEPO7VG4/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1261-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE6BERTPDDZTU2D7PHOS5VANHEPO7VG4/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_0_0",
"tracking": {
"current_release_date": "2021-09-14T12:07:16Z",
"generator": {
"date": "2021-09-14T12:07:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1261-1",
"initial_release_date": "2021-09-14T12:07:16Z",
"revision_history": [
{
"date": "2021-09-14T12:07:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "libopenssl10-1.0.2p-lp152.8.18.1.i586",
"product_id": "libopenssl10-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"product_id": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"product_id": "openssl-1_0_0-1.0.2p-lp152.8.18.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch",
"product": {
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch",
"product_id": "openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl10-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "libopenssl10-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.i586",
"openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.18.1.x86_64",
"openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.18.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-09-14T12:07:16Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:2827-1
Vulnerability from csaf_opensuse - Published: 2021-08-24 14:16 - Updated: 2021-08-24 14:16Summary
Security update for openssl-1_0_0
Severity
Important
Notes
Title of the patch: Security update for openssl-1_0_0
Description of the patch: This update for openssl-1_0_0 fixes the following issues:
- CVE-2021-3712: a bug in the code for printing certificate details could lead
to a buffer overrun that a malicious actor could exploit to crash the
application, causing a denial-of-service attack. [bsc#1189521]
Patchnames: openSUSE-SLE-15.3-2021-2827
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.40.2.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_0_0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2021-3712: a bug in the code for printing certificate details could lead\n to a buffer overrun that a malicious actor could exploit to crash the\n application, causing a denial-of-service attack. [bsc#1189521]\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2827",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2827-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2827-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZXNTTGRCRZBMWGGU4UK4PHVAAZAFABI2/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2827-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZXNTTGRCRZBMWGGU4UK4PHVAAZAFABI2/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_0_0",
"tracking": {
"current_release_date": "2021-08-24T14:16:52Z",
"generator": {
"date": "2021-08-24T14:16:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2827-1",
"initial_release_date": "2021-08-24T14:16:52Z",
"revision_history": [
{
"date": "2021-08-24T14:16:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.40.2.aarch64",
"product": {
"name": "libopenssl10-1.0.2p-3.40.2.aarch64",
"product_id": "libopenssl10-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"product_id": "libopenssl1_0_0-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"product_id": "openssl-1_0_0-1.0.2p-3.40.2.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_0_0-doc-1.0.2p-3.40.2.noarch",
"product": {
"name": "openssl-1_0_0-doc-1.0.2p-3.40.2.noarch",
"product_id": "openssl-1_0_0-doc-1.0.2p-3.40.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "libopenssl10-1.0.2p-3.40.2.ppc64le",
"product_id": "libopenssl10-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"product_id": "libopenssl1_0_0-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"product_id": "openssl-1_0_0-1.0.2p-3.40.2.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.40.2.s390x",
"product": {
"name": "libopenssl10-1.0.2p-3.40.2.s390x",
"product_id": "libopenssl10-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"product_id": "libopenssl1_0_0-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.40.2.s390x",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.s390x",
"product_id": "openssl-1_0_0-1.0.2p-3.40.2.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl10-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl10-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"product_id": "openssl-1_0_0-1.0.2p-3.40.2.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.aarch64"
},
"product_reference": "libopenssl10-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "libopenssl10-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.s390x"
},
"product_reference": "libopenssl10-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl10-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.aarch64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.aarch64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.s390x"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-3.40.2.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.40.2.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-3.40.2.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.40.2.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.40.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.40.2.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.40.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-24T14:16:52Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:2830-1
Vulnerability from csaf_opensuse - Published: 2021-08-24 14:20 - Updated: 2021-08-24 14:20Summary
Security update for openssl-1_1
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following security issues:
- CVE-2021-3711: A bug in the implementation of the SM2 decryption code
could lead to buffer overflows. [bsc#1189520]
- CVE-2021-3712: a bug in the code for printing certificate details could
lead to a buffer overrun that a malicious actor could exploit to crash
the application, causing a denial-of-service attack. [bsc#1189521]
Patchnames: openSUSE-SLE-15.3-2021-2830
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following security issues:\n\n- CVE-2021-3711: A bug in the implementation of the SM2 decryption code\n could lead to buffer overflows. [bsc#1189520]\n\n- CVE-2021-3712: a bug in the code for printing certificate details could\n lead to a buffer overrun that a malicious actor could exploit to crash\n the application, causing a denial-of-service attack. [bsc#1189521]\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2830",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2830-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2830-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YOUNRN5SCBRRVEIYDG3G3PFLGVRXKDPG/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2830-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YOUNRN5SCBRRVEIYDG3G3PFLGVRXKDPG/"
},
{
"category": "self",
"summary": "SUSE Bug 1189520",
"url": "https://bugzilla.suse.com/1189520"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3711 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3711/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2021-08-24T14:20:43Z",
"generator": {
"date": "2021-08-24T14:20:43Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2830-1",
"initial_release_date": "2021-08-24T14:20:43Z",
"revision_history": [
{
"date": "2021-08-24T14:20:43Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.27.1.aarch64",
"product": {
"name": "libopenssl1_1-1.1.1d-11.27.1.aarch64",
"product_id": "libopenssl1_1-1.1.1d-11.27.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.27.1.aarch64",
"product": {
"name": "openssl-1_1-1.1.1d-11.27.1.aarch64",
"product_id": "openssl-1_1-1.1.1d-11.27.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1d-11.27.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1d-11.27.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1d-11.27.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"product": {
"name": "libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"product_id": "libopenssl1_1-1.1.1d-11.27.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.27.1.ppc64le",
"product": {
"name": "openssl-1_1-1.1.1d-11.27.1.ppc64le",
"product_id": "openssl-1_1-1.1.1d-11.27.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.27.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.27.1.s390x",
"product": {
"name": "libopenssl1_1-1.1.1d-11.27.1.s390x",
"product_id": "libopenssl1_1-1.1.1d-11.27.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.27.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.27.1.s390x",
"product": {
"name": "openssl-1_1-1.1.1d-11.27.1.s390x",
"product_id": "openssl-1_1-1.1.1d-11.27.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl1_1-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.27.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1d-11.27.1.x86_64",
"product_id": "openssl-1_1-1.1.1d-11.27.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.27.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1d-11.27.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.27.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.27.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1d-11.27.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.27.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1d-11.27.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.27.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1d-11.27.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.27.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1d-11.27.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.27.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-11.27.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-doc-1.1.1d-11.27.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
},
"product_reference": "openssl-1_1-doc-1.1.1d-11.27.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3711",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3711"
}
],
"notes": [
{
"category": "general",
"text": "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3711",
"url": "https://www.suse.com/security/cve/CVE-2021-3711"
},
{
"category": "external",
"summary": "SUSE Bug 1189520 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1189520"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1205663 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1205663"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3711",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-24T14:20:43Z",
"details": "critical"
}
],
"title": "CVE-2021-3711"
},
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.27.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.27.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-24T14:20:43Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:2966-1
Vulnerability from csaf_opensuse - Published: 2021-09-07 07:49 - Updated: 2021-09-07 07:49Summary
Security update for openssl-1_1
Severity
Low
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following issues:
- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712.
Read buffer overruns processing ASN.1 strings (bsc#1189521).
Patchnames: openSUSE-SLE-15.3-2021-2966
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.30.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. \n Read buffer overruns processing ASN.1 strings (bsc#1189521).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2966",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2966-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2966-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZZPO3HVVYNS6WITBZKOQFXIVLJOK24MR/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2966-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZZPO3HVVYNS6WITBZKOQFXIVLJOK24MR/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2021-09-07T07:49:35Z",
"generator": {
"date": "2021-09-07T07:49:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2966-1",
"initial_release_date": "2021-09-07T07:49:35Z",
"revision_history": [
{
"date": "2021-09-07T07:49:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.30.1.aarch64",
"product": {
"name": "libopenssl1_1-1.1.1d-11.30.1.aarch64",
"product_id": "libopenssl1_1-1.1.1d-11.30.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.30.1.aarch64",
"product": {
"name": "openssl-1_1-1.1.1d-11.30.1.aarch64",
"product_id": "openssl-1_1-1.1.1d-11.30.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1d-11.30.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1d-11.30.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1d-11.30.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"product": {
"name": "libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"product_id": "libopenssl1_1-1.1.1d-11.30.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.30.1.ppc64le",
"product": {
"name": "openssl-1_1-1.1.1d-11.30.1.ppc64le",
"product_id": "openssl-1_1-1.1.1d-11.30.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.30.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.30.1.s390x",
"product": {
"name": "libopenssl1_1-1.1.1d-11.30.1.s390x",
"product_id": "libopenssl1_1-1.1.1d-11.30.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.30.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.30.1.s390x",
"product": {
"name": "openssl-1_1-1.1.1d-11.30.1.s390x",
"product_id": "openssl-1_1-1.1.1d-11.30.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl1_1-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-11.30.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1d-11.30.1.x86_64",
"product_id": "openssl-1_1-1.1.1d-11.30.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.30.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1d-11.30.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.30.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.30.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1d-11.30.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.30.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1d-11.30.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.30.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1d-11.30.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.30.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1d-11.30.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-11.30.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-11.30.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-doc-1.1.1d-11.30.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.30.1.noarch"
},
"product_reference": "openssl-1_1-doc-1.1.1d-11.30.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.30.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.30.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_1-devel-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_1-devel-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:libopenssl1_1-hmac-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_1-hmac-32bit-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.aarch64",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.s390x",
"openSUSE Leap 15.3:openssl-1_1-1.1.1d-11.30.1.x86_64",
"openSUSE Leap 15.3:openssl-1_1-doc-1.1.1d-11.30.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-09-07T07:49:35Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
OPENSUSE-SU-2021:2994-1
Vulnerability from csaf_opensuse - Published: 2021-09-09 12:33 - Updated: 2021-09-09 12:33Summary
Security update for openssl-1_0_0
Severity
Low
Notes
Title of the patch: Security update for openssl-1_0_0
Description of the patch: This update for openssl-1_0_0 fixes the following issues:
- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712.
Read buffer overruns processing ASN.1 strings (bsc#1189521).
Patchnames: openSUSE-SLE-15.3-2021-2994
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.43.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_0_0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. \n Read buffer overruns processing ASN.1 strings (bsc#1189521).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2994",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2994-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2994-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O65IINGUXDYQLSV7GD7SXFUKFY5WYUTA/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2994-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O65IINGUXDYQLSV7GD7SXFUKFY5WYUTA/"
},
{
"category": "self",
"summary": "SUSE Bug 1189521",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3712/"
}
],
"title": "Security update for openssl-1_0_0",
"tracking": {
"current_release_date": "2021-09-09T12:33:45Z",
"generator": {
"date": "2021-09-09T12:33:45Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2994-1",
"initial_release_date": "2021-09-09T12:33:45Z",
"revision_history": [
{
"date": "2021-09-09T12:33:45Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.43.1.aarch64",
"product": {
"name": "libopenssl10-1.0.2p-3.43.1.aarch64",
"product_id": "libopenssl10-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"product_id": "libopenssl1_0_0-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"product_id": "openssl-1_0_0-1.0.2p-3.43.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_0_0-doc-1.0.2p-3.43.1.noarch",
"product": {
"name": "openssl-1_0_0-doc-1.0.2p-3.43.1.noarch",
"product_id": "openssl-1_0_0-doc-1.0.2p-3.43.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "libopenssl10-1.0.2p-3.43.1.ppc64le",
"product_id": "libopenssl10-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"product_id": "libopenssl1_0_0-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"product_id": "openssl-1_0_0-1.0.2p-3.43.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.43.1.s390x",
"product": {
"name": "libopenssl10-1.0.2p-3.43.1.s390x",
"product_id": "libopenssl10-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"product_id": "libopenssl1_0_0-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.43.1.s390x",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.s390x",
"product_id": "openssl-1_0_0-1.0.2p-3.43.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl10-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl10-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl10-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"product": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"product_id": "openssl-1_0_0-1.0.2p-3.43.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"product": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"product_id": "openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.aarch64"
},
"product_reference": "libopenssl10-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "libopenssl10-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.s390x"
},
"product_reference": "libopenssl10-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl10-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl10-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.aarch64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64"
},
"product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.aarch64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.s390x"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64"
},
"product_reference": "openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-3.43.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.43.1.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-3.43.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3712"
}
],
"notes": [
{
"category": "general",
"text": "ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL\u0027s own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.43.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3712",
"url": "https://www.suse.com/security/cve/CVE-2021-3712"
},
{
"category": "external",
"summary": "SUSE Bug 1189521 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1189521"
},
{
"category": "external",
"summary": "SUSE Bug 1190129 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1190129"
},
{
"category": "external",
"summary": "SUSE Bug 1191640 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1191640"
},
{
"category": "external",
"summary": "SUSE Bug 1192100 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192100"
},
{
"category": "external",
"summary": "SUSE Bug 1192787 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1192787"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1194948"
},
{
"category": "external",
"summary": "SUSE Bug 1225628 for CVE-2021-3712",
"url": "https://bugzilla.suse.com/1225628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.43.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl-1_0_0-devel-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl10-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-hmac-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:libopenssl1_0_0-steam-32bit-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.aarch64",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.ppc64le",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.s390x",
"openSUSE Leap 15.3:openssl-1_0_0-cavs-1.0.2p-3.43.1.x86_64",
"openSUSE Leap 15.3:openssl-1_0_0-doc-1.0.2p-3.43.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-09-09T12:33:45Z",
"details": "moderate"
}
],
"title": "CVE-2021-3712"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…