Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-9893 (GCVE-0-2019-9893)
Vulnerability from cvelistv5 – Published: 2019-03-21 02:30 – Updated: 2024-08-04 22:01
VLAI
EPSS
Summary
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://github.com/seccomp/libseccomp/issues/139 | x_refsource_MISC |
| https://seclists.org/oss-sec/2019/q1/179 | x_refsource_MISC |
| https://security.gentoo.org/glsa/201904-18 | vendor-advisoryx_refsource_GENTOO |
| https://usn.ubuntu.com/4001-1/ | vendor-advisoryx_refsource_UBUNTU |
| https://usn.ubuntu.com/4001-2/ | vendor-advisoryx_refsource_UBUNTU |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| https://access.redhat.com/errata/RHSA-2019:3624 | vendor-advisoryx_refsource_REDHAT |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:01:55.155Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"name": "GLSA-201904-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"name": "USN-4001-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"name": "USN-4001-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"name": "openSUSE-SU-2019:2283",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"name": "openSUSE-SU-2019:2280",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"name": "RHSA-2019:3624",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-11-06T00:08:15.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"name": "GLSA-201904-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"name": "USN-4001-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"name": "USN-4001-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"name": "openSUSE-SU-2019:2283",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"name": "openSUSE-SU-2019:2280",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"name": "RHSA-2019:3624",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-9893",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/seccomp/libseccomp/issues/139",
"refsource": "MISC",
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"name": "https://seclists.org/oss-sec/2019/q1/179",
"refsource": "MISC",
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"name": "GLSA-201904-18",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"name": "USN-4001-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"name": "USN-4001-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"name": "openSUSE-SU-2019:2283",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"name": "openSUSE-SU-2019:2280",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"name": "RHSA-2019:3624",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-9893",
"datePublished": "2019-03-21T02:30:42.000Z",
"dateReserved": "2019-03-20T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:01:55.155Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-9893",
"date": "2026-05-25",
"epss": "0.00794",
"percentile": "0.74168"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libseccomp_project:libseccomp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.4.0\", \"matchCriteriaId\": \"BC9691EE-D2ED-4905-8526-FD0E8043B577\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.\"}, {\"lang\": \"es\", \"value\": \"libseccomp, en versiones anteriores a la 2.4.0, no gener\\u00f3 correctamente las comparaciones del argumento syscall de 64 bits mediante los operadores aritm\\u00e9ticos (LT, GT, LE, GE), lo que podr\\u00eda conducir a la omisi\\u00f3n de los filtros seccomp y a un potencial escalado de privilegios.\"}]",
"id": "CVE-2019-9893",
"lastModified": "2024-11-21T04:52:31.370",
"metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2019-03-21T16:01:17.687",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:3624\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://github.com/seccomp/libseccomp/issues/139\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://seclists.org/oss-sec/2019/q1/179\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201904-18\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://usn.ubuntu.com/4001-1/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://usn.ubuntu.com/4001-2/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:3624\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/seccomp/libseccomp/issues/139\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://seclists.org/oss-sec/2019/q1/179\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201904-18\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://usn.ubuntu.com/4001-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://usn.ubuntu.com/4001-2/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-9893\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-03-21T16:01:17.687\",\"lastModified\":\"2024-11-21T04:52:31.370\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.\"},{\"lang\":\"es\",\"value\":\"libseccomp, en versiones anteriores a la 2.4.0, no gener\u00f3 correctamente las comparaciones del argumento syscall de 64 bits mediante los operadores aritm\u00e9ticos (LT, GT, LE, GE), lo que podr\u00eda conducir a la omisi\u00f3n de los filtros seccomp y a un potencial escalado de privilegios.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libseccomp_project:libseccomp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.4.0\",\"matchCriteriaId\":\"BC9691EE-D2ED-4905-8526-FD0E8043B577\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3624\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://github.com/seccomp/libseccomp/issues/139\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://seclists.org/oss-sec/2019/q1/179\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201904-18\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/4001-1/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/4001-2/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3624\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/seccomp/libseccomp/issues/139\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://seclists.org/oss-sec/2019/q1/179\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201904-18\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/4001-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/4001-2/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2022-AVI-650
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | N/A | Junos Space Security Director Policy Enforcer versions antérieures à 22.1R1 | ||
| Juniper Networks | N/A | Juniper Networks Contrail Networking versions antérieures à 21.4.0 | ||
| Juniper Networks | N/A | Contrôleur Juniper Networks NorthStar versions antérieures à 5.1.0 Service Pack 6 | ||
| Juniper Networks | N/A | Contrôleur Juniper Networks NorthStar versions 6.x antérieures à 6.2.2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.4.x antérieures à 20.4R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.2.x antérieures à 21.2R2-S3, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.2.x antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.1.x antérieures à 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.1.x antérieures à 21.1R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.4.x antérieures à 20.4R3-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.3.x antérieures à 21.3R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.3.x antérieures à 21.3R2-S1, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.4.x antérieures à 20.4R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.2.x antérieures à 19.2R1-S9, 19.2R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.3.x antérieures à 21.3R1-S2, 21.3R2, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.2.x antérieures à 21.2R2-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.4.x antérieures à 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.4.x antérieures à 20.4R2-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.4.x antérieures à 19.4R2-S6, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS versions 18.4.x antérieures à 18.4R2-S10, 18.4R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions antérieures à 19.1R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.2.x antérieures à 21.2R2-S2, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.4.x antérieures à 21.4R1-S1, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions supérieures à 20.1R1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.4.x antérieures à 20.4R3-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.2.x antérieures à 21.2R2-S1, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.1.x antérieures à 21.1R2-S1, 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.2.x antérieures à 21.2R1-S1, 21.2R2, 21.2R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.3.x antérieures à 19.3R2-S7, 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS versions 17.3.x antérieures à 17.3R3-S12 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.4.x antérieures à 21.4R1-S1, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 19.4.x antérieures à 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.4.x antérieures à 21.4R1-S2, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.1.x antérieures à 19.1R2-S3, 19.1R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X49, 15.1X49-D100 et suivantes antérieures à 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.3.x antérieures à 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 12.3R12-S21 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.3.x antérieures à 21.3R1-S2, 21.3R2, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.2.x antérieures à 19.2R1-S8, 19.2R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 19.4.x antérieures à 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.1.x antérieures à 21.1R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.4.x antérieures à 20.4R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.4.x antérieures à 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 22.1.x antérieures à 22.1R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.3.x antérieures à 21.3R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX toutes versions antérieures à 19.1R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.4.x antérieures à 19.4R2-S5, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.4.x antérieures à 19.4R2-S6, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.1.x antérieures à 21.1R2, 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.1.x antérieures à 21.1R2-S1, 21.1R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.2.x antérieures à 21.2R2-S2, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 18.3.x antérieures à 18.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1.x antérieures à 15.1R7-S10 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.3.x antérieures à 21.3R2-S1-EVO, 21.3R3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.2.x antérieures à 21.2R1-S1-EVO, 21.2R3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.4.x antérieures à 21.4R1-S1-EVO, 21.4R2-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 20.4R3-S3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.1.x aantérieures à 21.1R3-S1-EVO | ||
| Juniper Networks | Junos Space | Junos Space versions antérieures à 22.1R1 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos Space Security Director Policy Enforcer versions ant\u00e9rieures \u00e0 22.1R1",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Juniper Networks Contrail Networking versions ant\u00e9rieures \u00e0 21.4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Contr\u00f4leur Juniper Networks NorthStar versions ant\u00e9rieures \u00e0 5.1.0 Service Pack 6",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Contr\u00f4leur Juniper Networks NorthStar versions 6.x ant\u00e9rieures \u00e0 6.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S3, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.3.x ant\u00e9rieures \u00e0 21.3R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.3.x ant\u00e9rieures \u00e0 21.3R2-S1, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.3.x ant\u00e9rieures \u00e0 21.3R1-S2, 21.3R2, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.4.x ant\u00e9rieures \u00e0 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.4.x ant\u00e9rieures \u00e0 20.4R2-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S6, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 18.4.x ant\u00e9rieures \u00e0 18.4R2-S10, 18.4R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions ant\u00e9rieures \u00e0 19.1R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions sup\u00e9rieures \u00e0 20.1R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S1, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2-S1, 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.2.x ant\u00e9rieures \u00e0 21.2R1-S1, 21.2R2, 21.2R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.3.x ant\u00e9rieures \u00e0 19.3R2-S7, 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 17.3.x ant\u00e9rieures \u00e0 17.3R3-S12",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 19.4.x ant\u00e9rieures \u00e0 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S2, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.1.x ant\u00e9rieures \u00e0 19.1R2-S3, 19.1R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X49, 15.1X49-D100 et suivantes ant\u00e9rieures \u00e0 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.3.x ant\u00e9rieures \u00e0 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 12.3R12-S21",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.3.x ant\u00e9rieures \u00e0 21.3R1-S2, 21.3R2, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S8, 19.2R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 19.4.x ant\u00e9rieures \u00e0 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.4.x ant\u00e9rieures \u00e0 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 22.1.x ant\u00e9rieures \u00e0 22.1R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.3.x ant\u00e9rieures \u00e0 21.3R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX toutes versions ant\u00e9rieures \u00e0 19.1R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S5, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S6, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2, 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2-S1, 21.1R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 18.3.x ant\u00e9rieures \u00e0 18.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1.x ant\u00e9rieures \u00e0 15.1R7-S10",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.3.x ant\u00e9rieures \u00e0 21.3R2-S1-EVO, 21.3R3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.2.x ant\u00e9rieures \u00e0 21.2R1-S1-EVO, 21.2R3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1-EVO, 21.4R2-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 20.4R3-S3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.1.x aant\u00e9rieures \u00e0 21.1R3-S1-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space versions ant\u00e9rieures \u00e0 22.1R1",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2012-0876",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0876"
},
{
"name": "CVE-2003-0001",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0001"
},
{
"name": "CVE-2015-2716",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2716"
},
{
"name": "CVE-2015-1283",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1283"
},
{
"name": "CVE-2013-7422",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7422"
},
{
"name": "CVE-2015-7705",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
},
{
"name": "CVE-2015-8035",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8035"
},
{
"name": "CVE-2016-2516",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2516"
},
{
"name": "CVE-2016-4612",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4612"
},
{
"name": "CVE-2016-4610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4610"
},
{
"name": "CVE-2016-4608",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4608"
},
{
"name": "CVE-2016-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4609"
},
{
"name": "CVE-2016-4607",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4607"
},
{
"name": "CVE-2016-5131",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5131"
},
{
"name": "CVE-2016-4658",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4658"
},
{
"name": "CVE-2016-4738",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4738"
},
{
"name": "CVE-2016-5300",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5300"
},
{
"name": "CVE-2016-9063",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9063"
},
{
"name": "CVE-2016-8618",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8618"
},
{
"name": "CVE-2016-8622",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8622"
},
{
"name": "CVE-2016-8619",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8619"
},
{
"name": "CVE-2016-5180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5180"
},
{
"name": "CVE-2016-9538",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9538"
},
{
"name": "CVE-2016-9539",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9539"
},
{
"name": "CVE-2017-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0553"
},
{
"name": "CVE-2017-7375",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7375"
},
{
"name": "CVE-2017-1000368",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000368"
},
{
"name": "CVE-2017-10989",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10989"
},
{
"name": "CVE-2017-7525",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7525"
},
{
"name": "CVE-2017-15412",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15412"
},
{
"name": "CVE-2017-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8817"
},
{
"name": "CVE-2015-8385",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8385"
},
{
"name": "CVE-2015-8388",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8388"
},
{
"name": "CVE-2015-2327",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2327"
},
{
"name": "CVE-2017-16931",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16931"
},
{
"name": "CVE-2015-8394",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8394"
},
{
"name": "CVE-2015-8387",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8387"
},
{
"name": "CVE-2015-8391",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8391"
},
{
"name": "CVE-2015-8380",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8380"
},
{
"name": "CVE-2016-3191",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3191"
},
{
"name": "CVE-2015-8390",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8390"
},
{
"name": "CVE-2015-8386",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8386"
},
{
"name": "CVE-2015-2328",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2328"
},
{
"name": "CVE-2017-18258",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18258"
},
{
"name": "CVE-2018-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9251"
},
{
"name": "CVE-2018-7489",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
},
{
"name": "CVE-2017-15095",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15095"
},
{
"name": "CVE-2017-17485",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17485"
},
{
"name": "CVE-2019-9518",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
},
{
"name": "CVE-2018-14721",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14721"
},
{
"name": "CVE-2019-8457",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8457"
},
{
"name": "CVE-2019-1354",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1354"
},
{
"name": "CVE-2019-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1352"
},
{
"name": "CVE-2019-1387",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1387"
},
{
"name": "CVE-2019-1349",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1349"
},
{
"name": "CVE-2019-1350",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1350"
},
{
"name": "CVE-2019-17267",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2020-8616",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8616"
},
{
"name": "CVE-2020-8617",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8617"
},
{
"name": "CVE-2019-17571",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17571"
},
{
"name": "CVE-2017-14867",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14867"
},
{
"name": "CVE-2019-16943",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2020-11656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11656"
},
{
"name": "CVE-2020-1968",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1968"
},
{
"name": "CVE-2020-15999",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15999"
},
{
"name": "CVE-2020-1747",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1747"
},
{
"name": "CVE-2020-25696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25696"
},
{
"name": "CVE-2020-13631",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13631"
},
{
"name": "CVE-2020-13435",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13435"
},
{
"name": "CVE-2020-13434",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13434"
},
{
"name": "CVE-2020-15358",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15358"
},
{
"name": "CVE-2020-13630",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13630"
},
{
"name": "CVE-2020-25704",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25704"
},
{
"name": "CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"name": "CVE-2021-23839",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23839"
},
{
"name": "CVE-2021-23841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23841"
},
{
"name": "CVE-2021-23840",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23840"
},
{
"name": "CVE-2021-3177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3177"
},
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2021-28950",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28950"
},
{
"name": "CVE-2020-36322",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36322"
},
{
"name": "CVE-2021-23017",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23017"
},
{
"name": "CVE-2020-36385",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36385"
},
{
"name": "CVE-2020-10878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10878"
},
{
"name": "CVE-2020-13632",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13632"
},
{
"name": "CVE-2020-11655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11655"
},
{
"name": "CVE-2020-29573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29573"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2021-3712",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3712"
},
{
"name": "CVE-2020-12049",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12049"
},
{
"name": "CVE-2020-14363",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14363"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2021-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
},
{
"name": "CVE-2019-9169",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9169"
},
{
"name": "CVE-2021-3517",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3517"
},
{
"name": "CVE-2021-20271",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20271"
},
{
"name": "CVE-2020-27619",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27619"
},
{
"name": "CVE-2020-8492",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8492"
},
{
"name": "CVE-2021-20227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20227"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2021-22946",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22946"
},
{
"name": "CVE-2020-13871",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13871"
},
{
"name": "CVE-2020-25717",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25717"
},
{
"name": "CVE-2016-2124",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2124"
},
{
"name": "CVE-2021-42739",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42739"
},
{
"name": "CVE-2019-9924",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9924"
},
{
"name": "CVE-2019-14892",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
},
{
"name": "CVE-2019-14893",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
},
{
"name": "CVE-2022-21304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21304"
},
{
"name": "CVE-2022-21245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21245"
},
{
"name": "CVE-2022-21344",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21344"
},
{
"name": "CVE-2022-21270",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21270"
},
{
"name": "CVE-2022-21367",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21367"
},
{
"name": "CVE-2022-21303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21303"
},
{
"name": "CVE-2020-9327",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9327"
},
{
"name": "CVE-2021-41617",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41617"
},
{
"name": "CVE-2019-14379",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
},
{
"name": "CVE-2014-6272",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-6272"
},
{
"name": "CVE-2015-6525",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6525"
},
{
"name": "CVE-2018-14404",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14404"
},
{
"name": "CVE-2017-1000158",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000158"
},
{
"name": "CVE-2020-14343",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14343"
},
{
"name": "CVE-2018-1000654",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000654"
},
{
"name": "CVE-2014-9471",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9471"
},
{
"name": "CVE-2019-14540",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
},
{
"name": "CVE-2020-8840",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
},
{
"name": "CVE-2019-16942",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
},
{
"name": "CVE-2019-16335",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
},
{
"name": "CVE-2019-17531",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
},
{
"name": "CVE-2019-20330",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
},
{
"name": "CVE-2019-0205",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0205"
},
{
"name": "CVE-2017-12562",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12562"
},
{
"name": "CVE-2018-14567",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14567"
},
{
"name": "CVE-2022-22217",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22217"
},
{
"name": "CVE-2016-4484",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4484"
},
{
"name": "CVE-2015-4042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4042"
},
{
"name": "CVE-2016-7943",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7943"
},
{
"name": "CVE-2016-6318",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6318"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2016-7942",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7942"
},
{
"name": "CVE-2017-9117",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9117"
},
{
"name": "CVE-2022-22203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22203"
},
{
"name": "CVE-2015-5228",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5228"
},
{
"name": "CVE-2021-42574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42574"
},
{
"name": "CVE-2022-22216",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22216"
},
{
"name": "CVE-2015-7805",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7805"
},
{
"name": "CVE-2017-8779",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8779"
},
{
"name": "CVE-2022-22206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22206"
},
{
"name": "CVE-2016-7947",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7947"
},
{
"name": "CVE-2016-7951",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7951"
},
{
"name": "CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"name": "CVE-2018-6954",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6954"
},
{
"name": "CVE-2014-9488",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9488"
},
{
"name": "CVE-2018-14720",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14720"
},
{
"name": "CVE-2017-15994",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15994"
},
{
"name": "CVE-2022-22209",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22209"
},
{
"name": "CVE-2015-8540",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8540"
},
{
"name": "CVE-2016-7950",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7950"
},
{
"name": "CVE-2017-14930",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14930"
},
{
"name": "CVE-2017-8105",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8105"
},
{
"name": "CVE-2016-7949",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7949"
},
{
"name": "CVE-2017-5225",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5225"
},
{
"name": "CVE-2016-1951",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1951"
},
{
"name": "CVE-2017-8871",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8871"
},
{
"name": "CVE-2018-19362",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
},
{
"name": "CVE-2022-22215",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22215"
},
{
"name": "CVE-2015-7036",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7036"
},
{
"name": "CVE-2016-2779",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2779"
},
{
"name": "CVE-2022-22213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22213"
},
{
"name": "CVE-2016-10195",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10195"
},
{
"name": "CVE-2014-5044",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5044"
},
{
"name": "CVE-2016-7944",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7944"
},
{
"name": "CVE-2014-9114",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9114"
},
{
"name": "CVE-2014-9474",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9474"
},
{
"name": "CVE-2015-2059",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2059"
},
{
"name": "CVE-2022-22207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22207"
},
{
"name": "CVE-2022-22205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22205"
},
{
"name": "CVE-2022-22204",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22204"
},
{
"name": "CVE-2017-5929",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5929"
},
{
"name": "CVE-2018-19361",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
},
{
"name": "CVE-2017-10685",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10685"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2015-8947",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8947"
},
{
"name": "CVE-2019-9893",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9893"
},
{
"name": "CVE-2016-1238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1238"
},
{
"name": "CVE-2016-7948",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7948"
},
{
"name": "CVE-2014-9746",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9746"
},
{
"name": "CVE-2018-14719",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
},
{
"name": "CVE-2016-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2052"
},
{
"name": "CVE-2021-3487",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3487"
},
{
"name": "CVE-2022-22214",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22214"
},
{
"name": "CVE-2014-4043",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4043"
},
{
"name": "CVE-2022-22221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22221"
},
{
"name": "CVE-2022-22212",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22212"
},
{
"name": "CVE-2017-16548",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16548"
},
{
"name": "CVE-2021-36690",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36690"
},
{
"name": "CVE-2014-9939",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9939"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2015-3308",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3308"
},
{
"name": "CVE-2017-7614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7614"
},
{
"name": "CVE-2022-22202",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22202"
},
{
"name": "CVE-2017-8421",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8421"
},
{
"name": "CVE-2017-14062",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14062"
},
{
"name": "CVE-2018-14718",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
},
{
"name": "CVE-2022-22218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22218"
},
{
"name": "CVE-2017-10684",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10684"
},
{
"name": "CVE-2022-22210",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22210"
},
{
"name": "CVE-2017-13716",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-13716"
},
{
"name": "CVE-2021-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
},
{
"name": "CVE-2015-5602",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5602"
},
{
"name": "CVE-2018-11307",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
},
{
"name": "CVE-2018-19360",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
},
{
"name": "CVE-2017-17434",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17434"
},
{
"name": "CVE-2017-8287",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8287"
},
{
"name": "CVE-2017-8804",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8804"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-650",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69723 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Security-Director-Policy-Enforcer-upgraded-to-CentOS-7-9"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69722 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release-CVE-2022-22218"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69713 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-RIB-and-PFEs-can-get-out-of-sync-due-to-a-memory-leak-caused-by-interface-flaps-or-route-churn-CVE-2022-22209"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69710 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-series-The-PFE-will-crash-when-specific-traffic-is-scanned-by-Enhanced-Web-Filtering-safe-search-CVE-2022-22206"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69717 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Denial-of-Service-DoS-vulnerability-in-RPD-upon-receipt-of-specific-BGP-update-CVE-2022-22213"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69707 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-Receipt-of-specific-traffic-will-lead-to-an-fxpc-process-crash-followed-by-an-FPC-reboot-CVE-2022-22203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69714 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX5000-Series-and-MX-Series-An-l2alm-crash-leading-to-an-FPC-crash-can-be-observed-in-VxLAN-scenario-CVE-2022-22210"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69718 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-In-an-MPLS-scenario-upon-receipt-of-a-specific-IPv6-packet-an-FPC-will-crash-CVE-2022-22214"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69726 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Contrail-Networking-Multiple-vulnerabilities-resolved-in-Contrail-Networking-21-4"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69711 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-with-MPC11-In-a-GNF-node-slicing-scenario-gathering-AF-interface-statistics-can-lead-to-a-kernel-crash-CVE-2022-22207"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69715 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-OpenSSL-security-fixes"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69708 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-and-SRX-Series-When-receiving-a-specific-SIP-packets-stale-call-table-entries-are-created-which-eventually-leads-to-a-DoS-for-all-SIP-traffic-CVE-2022-22204"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69716 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-Evolved-A-high-rate-of-specific-hostbound-traffic-will-cause-unexpected-hostbound-traffic-delays-or-drops-CVE-2022-22212"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69719 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-var-run-pid-env-files-are-potentially-not-deleted-during-termination-of-a-gRPC-connection-causing-inode-exhaustion-CVE-2022-22215"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69703 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Northstar-Controller-nginx-component-allows-remote-attacker-to-cause-worker-process-crash-or-potentially-arbitrary-code-execution-CVE-2021-23017-2"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69721 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX10k-Series-Denial-of-Service-DoS-upon-receipt-of-crafted-MLD-packets-on-multi-homing-ESI-in-VXLAN-CVE-2022-22217"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69720 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-Etherleak-memory-disclosure-in-Ethernet-padding-data-CVE-2022-22216"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69725 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-and-EX-Series-Local-privilege-escalation-flaw-in-download-functionality-CVE-2022-22221"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69705 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-in-SQLite-resolved"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69709 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-Series-An-FPC-memory-leak-can-occur-in-an-APBR-scenario-CVE-2022-22205"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69706 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-PTX-Series-FPCs-may-restart-unexpectedly-upon-receipt-of-specific-MPLS-packets-with-certain-multi-unit-interface-configurations-CVE-2022-22202"
}
]
}
CERTFR-2022-AVI-650
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | N/A | Junos Space Security Director Policy Enforcer versions antérieures à 22.1R1 | ||
| Juniper Networks | N/A | Juniper Networks Contrail Networking versions antérieures à 21.4.0 | ||
| Juniper Networks | N/A | Contrôleur Juniper Networks NorthStar versions antérieures à 5.1.0 Service Pack 6 | ||
| Juniper Networks | N/A | Contrôleur Juniper Networks NorthStar versions 6.x antérieures à 6.2.2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.4.x antérieures à 20.4R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.2.x antérieures à 21.2R2-S3, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.2.x antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.1.x antérieures à 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.1.x antérieures à 21.1R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.4.x antérieures à 20.4R3-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.3.x antérieures à 21.3R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.3.x antérieures à 21.3R2-S1, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.4.x antérieures à 20.4R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.2.x antérieures à 19.2R1-S9, 19.2R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.3.x antérieures à 21.3R1-S2, 21.3R2, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.2.x antérieures à 21.2R2-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.4.x antérieures à 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.4.x antérieures à 20.4R2-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.4.x antérieures à 19.4R2-S6, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS versions 18.4.x antérieures à 18.4R2-S10, 18.4R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions antérieures à 19.1R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.2.x antérieures à 21.2R2-S2, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.4.x antérieures à 21.4R1-S1, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions antérieures à 19.2R1-S9, 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions supérieures à 20.1R1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.4.x antérieures à 20.4R3-S2, 20.4R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.2.x antérieures à 21.2R2-S1, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.1.x antérieures à 21.1R2-S1, 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.2.x antérieures à 21.2R1-S1, 21.2R2, 21.2R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.3.x antérieures à 19.3R2-S7, 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS versions 17.3.x antérieures à 17.3R3-S12 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.4.x antérieures à 21.4R1-S1, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 19.4.x antérieures à 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.4.x antérieures à 21.4R1-S2, 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS versions 19.1.x antérieures à 19.1R2-S3, 19.1R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X49, 15.1X49-D100 et suivantes antérieures à 19.2R3-S5 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.3.x antérieures à 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 12.3R12-S21 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 21.3.x antérieures à 21.3R1-S2, 21.3R2, 21.3R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.2.x antérieures à 19.2R1-S8, 19.2R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 19.4.x antérieures à 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes SRX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.3.x antérieures à 20.3R3-S3 | ||
| Juniper Networks | Junos OS | Junos OS versions 21.1.x antérieures à 21.1R3-S1 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.4.x antérieures à 20.4R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 21.4.x antérieures à 21.4R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 22.1.x antérieures à 22.1R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.3.x antérieures à 21.3R2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX toutes versions antérieures à 19.1R3-S9 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 19.4.x antérieures à 19.4R2-S5, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.4.x antérieures à 19.4R2-S6, 19.4R3-S8 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 20.2.x antérieures à 20.2R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 21.1.x antérieures à 21.1R2, 21.1R3-S2 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 21.1.x antérieures à 21.1R2-S1, 21.1R3 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes QFX versions 19.3.x antérieures à 19.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes EX versions 21.2.x antérieures à 21.2R2-S2, 21.2R3 | ||
| Juniper Networks | Junos OS | Junos OS versions 20.3.x antérieures à 20.3R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 18.3.x antérieures à 18.3R3-S6 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes PTX versions 20.1.x antérieures à 20.1R3-S4 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1.x antérieures à 15.1R7-S10 | ||
| Juniper Networks | Junos OS | Junos OS sur plateformes MX versions 20.2.x antérieures à 20.2R3-S5 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.3.x antérieures à 21.3R2-S1-EVO, 21.3R3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.2.x antérieures à 21.2R1-S1-EVO, 21.2R3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.4.x antérieures à 21.4R1-S1-EVO, 21.4R2-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 20.4R3-S3-EVO | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions 21.1.x aantérieures à 21.1R3-S1-EVO | ||
| Juniper Networks | Junos Space | Junos Space versions antérieures à 22.1R1 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos Space Security Director Policy Enforcer versions ant\u00e9rieures \u00e0 22.1R1",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Juniper Networks Contrail Networking versions ant\u00e9rieures \u00e0 21.4.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Contr\u00f4leur Juniper Networks NorthStar versions ant\u00e9rieures \u00e0 5.1.0 Service Pack 6",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Contr\u00f4leur Juniper Networks NorthStar versions 6.x ant\u00e9rieures \u00e0 6.2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S3, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.3.x ant\u00e9rieures \u00e0 21.3R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.3.x ant\u00e9rieures \u00e0 21.3R2-S1, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.3.x ant\u00e9rieures \u00e0 21.3R1-S2, 21.3R2, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.4.x ant\u00e9rieures \u00e0 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.4.x ant\u00e9rieures \u00e0 20.4R2-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S6, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 18.4.x ant\u00e9rieures \u00e0 18.4R2-S10, 18.4R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions ant\u00e9rieures \u00e0 19.1R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions ant\u00e9rieures \u00e0 19.2R1-S9, 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions sup\u00e9rieures \u00e0 20.1R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2, 20.4R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S1, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2-S1, 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.2.x ant\u00e9rieures \u00e0 21.2R1-S1, 21.2R2, 21.2R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.3.x ant\u00e9rieures \u00e0 19.3R2-S7, 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 17.3.x ant\u00e9rieures \u00e0 17.3R3-S12",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 19.4.x ant\u00e9rieures \u00e0 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S2, 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 19.1.x ant\u00e9rieures \u00e0 19.1R2-S3, 19.1R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X49, 15.1X49-D100 et suivantes ant\u00e9rieures \u00e0 19.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.3.x ant\u00e9rieures \u00e0 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 12.3R12-S21",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 21.3.x ant\u00e9rieures \u00e0 21.3R1-S2, 21.3R2, 21.3R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.2.x ant\u00e9rieures \u00e0 19.2R1-S8, 19.2R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 19.4.x ant\u00e9rieures \u00e0 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes SRX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 21.1.x ant\u00e9rieures \u00e0 21.1R3-S1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.4.x ant\u00e9rieures \u00e0 20.4R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 21.4.x ant\u00e9rieures \u00e0 21.4R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 22.1.x ant\u00e9rieures \u00e0 22.1R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.3.x ant\u00e9rieures \u00e0 21.3R2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX toutes versions ant\u00e9rieures \u00e0 19.1R3-S9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S5, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.4.x ant\u00e9rieures \u00e0 19.4R2-S6, 19.4R3-S8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2, 21.1R3-S2",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 21.1.x ant\u00e9rieures \u00e0 21.1R2-S1, 21.1R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes QFX versions 19.3.x ant\u00e9rieures \u00e0 19.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes EX versions 21.2.x ant\u00e9rieures \u00e0 21.2R2-S2, 21.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 20.3.x ant\u00e9rieures \u00e0 20.3R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 18.3.x ant\u00e9rieures \u00e0 18.3R3-S6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes PTX versions 20.1.x ant\u00e9rieures \u00e0 20.1R3-S4",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1.x ant\u00e9rieures \u00e0 15.1R7-S10",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur plateformes MX versions 20.2.x ant\u00e9rieures \u00e0 20.2R3-S5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.3.x ant\u00e9rieures \u00e0 21.3R2-S1-EVO, 21.3R3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.2.x ant\u00e9rieures \u00e0 21.2R1-S1-EVO, 21.2R3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.4.x ant\u00e9rieures \u00e0 21.4R1-S1-EVO, 21.4R2-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 20.4R3-S3-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions 21.1.x aant\u00e9rieures \u00e0 21.1R3-S1-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space versions ant\u00e9rieures \u00e0 22.1R1",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2012-0876",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0876"
},
{
"name": "CVE-2003-0001",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0001"
},
{
"name": "CVE-2015-2716",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2716"
},
{
"name": "CVE-2015-1283",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1283"
},
{
"name": "CVE-2013-7422",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-7422"
},
{
"name": "CVE-2015-7705",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
},
{
"name": "CVE-2015-8035",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8035"
},
{
"name": "CVE-2016-2516",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2516"
},
{
"name": "CVE-2016-4612",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4612"
},
{
"name": "CVE-2016-4610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4610"
},
{
"name": "CVE-2016-4608",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4608"
},
{
"name": "CVE-2016-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4609"
},
{
"name": "CVE-2016-4607",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4607"
},
{
"name": "CVE-2016-5131",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5131"
},
{
"name": "CVE-2016-4658",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4658"
},
{
"name": "CVE-2016-4738",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4738"
},
{
"name": "CVE-2016-5300",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5300"
},
{
"name": "CVE-2016-9063",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9063"
},
{
"name": "CVE-2016-8618",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8618"
},
{
"name": "CVE-2016-8622",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8622"
},
{
"name": "CVE-2016-8619",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8619"
},
{
"name": "CVE-2016-5180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5180"
},
{
"name": "CVE-2016-9538",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9538"
},
{
"name": "CVE-2016-9539",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9539"
},
{
"name": "CVE-2017-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0553"
},
{
"name": "CVE-2017-7375",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7375"
},
{
"name": "CVE-2017-1000368",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000368"
},
{
"name": "CVE-2017-10989",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10989"
},
{
"name": "CVE-2017-7525",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7525"
},
{
"name": "CVE-2017-15412",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15412"
},
{
"name": "CVE-2017-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8817"
},
{
"name": "CVE-2015-8385",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8385"
},
{
"name": "CVE-2015-8388",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8388"
},
{
"name": "CVE-2015-2327",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2327"
},
{
"name": "CVE-2017-16931",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16931"
},
{
"name": "CVE-2015-8394",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8394"
},
{
"name": "CVE-2015-8387",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8387"
},
{
"name": "CVE-2015-8391",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8391"
},
{
"name": "CVE-2015-8380",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8380"
},
{
"name": "CVE-2016-3191",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3191"
},
{
"name": "CVE-2015-8390",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8390"
},
{
"name": "CVE-2015-8386",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8386"
},
{
"name": "CVE-2015-2328",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2328"
},
{
"name": "CVE-2017-18258",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18258"
},
{
"name": "CVE-2018-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9251"
},
{
"name": "CVE-2018-7489",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
},
{
"name": "CVE-2017-15095",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15095"
},
{
"name": "CVE-2017-17485",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17485"
},
{
"name": "CVE-2019-9518",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
},
{
"name": "CVE-2018-14721",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14721"
},
{
"name": "CVE-2019-8457",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8457"
},
{
"name": "CVE-2019-1354",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1354"
},
{
"name": "CVE-2019-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1352"
},
{
"name": "CVE-2019-1387",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1387"
},
{
"name": "CVE-2019-1349",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1349"
},
{
"name": "CVE-2019-1350",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1350"
},
{
"name": "CVE-2019-17267",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17267"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2020-8616",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8616"
},
{
"name": "CVE-2020-8617",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8617"
},
{
"name": "CVE-2019-17571",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17571"
},
{
"name": "CVE-2017-14867",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14867"
},
{
"name": "CVE-2019-16943",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16943"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2020-11656",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11656"
},
{
"name": "CVE-2020-1968",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1968"
},
{
"name": "CVE-2020-15999",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15999"
},
{
"name": "CVE-2020-1747",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1747"
},
{
"name": "CVE-2020-25696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25696"
},
{
"name": "CVE-2020-13631",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13631"
},
{
"name": "CVE-2020-13435",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13435"
},
{
"name": "CVE-2020-13434",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13434"
},
{
"name": "CVE-2020-15358",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15358"
},
{
"name": "CVE-2020-13630",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13630"
},
{
"name": "CVE-2020-25704",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25704"
},
{
"name": "CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"name": "CVE-2021-23839",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23839"
},
{
"name": "CVE-2021-23841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23841"
},
{
"name": "CVE-2021-23840",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23840"
},
{
"name": "CVE-2021-3177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3177"
},
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2021-28950",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28950"
},
{
"name": "CVE-2020-36322",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36322"
},
{
"name": "CVE-2021-23017",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23017"
},
{
"name": "CVE-2020-36385",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36385"
},
{
"name": "CVE-2020-10878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10878"
},
{
"name": "CVE-2020-13632",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13632"
},
{
"name": "CVE-2020-11655",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11655"
},
{
"name": "CVE-2020-29573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29573"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2021-3712",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3712"
},
{
"name": "CVE-2020-12049",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12049"
},
{
"name": "CVE-2020-14363",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14363"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2021-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
},
{
"name": "CVE-2019-9169",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9169"
},
{
"name": "CVE-2021-3517",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3517"
},
{
"name": "CVE-2021-20271",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20271"
},
{
"name": "CVE-2020-27619",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27619"
},
{
"name": "CVE-2020-8492",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8492"
},
{
"name": "CVE-2021-20227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20227"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2021-22946",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22946"
},
{
"name": "CVE-2020-13871",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13871"
},
{
"name": "CVE-2020-25717",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25717"
},
{
"name": "CVE-2016-2124",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2124"
},
{
"name": "CVE-2021-42739",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42739"
},
{
"name": "CVE-2019-9924",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9924"
},
{
"name": "CVE-2019-14892",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14892"
},
{
"name": "CVE-2019-14893",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14893"
},
{
"name": "CVE-2022-21304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21304"
},
{
"name": "CVE-2022-21245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21245"
},
{
"name": "CVE-2022-21344",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21344"
},
{
"name": "CVE-2022-21270",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21270"
},
{
"name": "CVE-2022-21367",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21367"
},
{
"name": "CVE-2022-21303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21303"
},
{
"name": "CVE-2020-9327",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9327"
},
{
"name": "CVE-2021-41617",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41617"
},
{
"name": "CVE-2019-14379",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
},
{
"name": "CVE-2014-6272",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-6272"
},
{
"name": "CVE-2015-6525",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6525"
},
{
"name": "CVE-2018-14404",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14404"
},
{
"name": "CVE-2017-1000158",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000158"
},
{
"name": "CVE-2020-14343",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14343"
},
{
"name": "CVE-2018-1000654",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000654"
},
{
"name": "CVE-2014-9471",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9471"
},
{
"name": "CVE-2019-14540",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14540"
},
{
"name": "CVE-2020-8840",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
},
{
"name": "CVE-2019-16942",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16942"
},
{
"name": "CVE-2019-16335",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16335"
},
{
"name": "CVE-2019-17531",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17531"
},
{
"name": "CVE-2019-20330",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
},
{
"name": "CVE-2019-0205",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-0205"
},
{
"name": "CVE-2017-12562",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12562"
},
{
"name": "CVE-2018-14567",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14567"
},
{
"name": "CVE-2022-22217",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22217"
},
{
"name": "CVE-2016-4484",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4484"
},
{
"name": "CVE-2015-4042",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4042"
},
{
"name": "CVE-2016-7943",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7943"
},
{
"name": "CVE-2016-6318",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6318"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2016-7942",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7942"
},
{
"name": "CVE-2017-9117",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9117"
},
{
"name": "CVE-2022-22203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22203"
},
{
"name": "CVE-2015-5228",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5228"
},
{
"name": "CVE-2021-42574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42574"
},
{
"name": "CVE-2022-22216",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22216"
},
{
"name": "CVE-2015-7805",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7805"
},
{
"name": "CVE-2017-8779",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8779"
},
{
"name": "CVE-2022-22206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22206"
},
{
"name": "CVE-2016-7947",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7947"
},
{
"name": "CVE-2016-7951",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7951"
},
{
"name": "CVE-2018-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
},
{
"name": "CVE-2018-6954",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6954"
},
{
"name": "CVE-2014-9488",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9488"
},
{
"name": "CVE-2018-14720",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14720"
},
{
"name": "CVE-2017-15994",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-15994"
},
{
"name": "CVE-2022-22209",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22209"
},
{
"name": "CVE-2015-8540",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8540"
},
{
"name": "CVE-2016-7950",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7950"
},
{
"name": "CVE-2017-14930",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14930"
},
{
"name": "CVE-2017-8105",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8105"
},
{
"name": "CVE-2016-7949",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7949"
},
{
"name": "CVE-2017-5225",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5225"
},
{
"name": "CVE-2016-1951",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1951"
},
{
"name": "CVE-2017-8871",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8871"
},
{
"name": "CVE-2018-19362",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19362"
},
{
"name": "CVE-2022-22215",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22215"
},
{
"name": "CVE-2015-7036",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7036"
},
{
"name": "CVE-2016-2779",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2779"
},
{
"name": "CVE-2022-22213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22213"
},
{
"name": "CVE-2016-10195",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10195"
},
{
"name": "CVE-2014-5044",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5044"
},
{
"name": "CVE-2016-7944",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7944"
},
{
"name": "CVE-2014-9114",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9114"
},
{
"name": "CVE-2014-9474",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9474"
},
{
"name": "CVE-2015-2059",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2059"
},
{
"name": "CVE-2022-22207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22207"
},
{
"name": "CVE-2022-22205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22205"
},
{
"name": "CVE-2022-22204",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22204"
},
{
"name": "CVE-2017-5929",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5929"
},
{
"name": "CVE-2018-19361",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19361"
},
{
"name": "CVE-2017-10685",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10685"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2015-8947",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8947"
},
{
"name": "CVE-2019-9893",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9893"
},
{
"name": "CVE-2016-1238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1238"
},
{
"name": "CVE-2016-7948",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7948"
},
{
"name": "CVE-2014-9746",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9746"
},
{
"name": "CVE-2018-14719",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14719"
},
{
"name": "CVE-2016-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2052"
},
{
"name": "CVE-2021-3487",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3487"
},
{
"name": "CVE-2022-22214",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22214"
},
{
"name": "CVE-2014-4043",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4043"
},
{
"name": "CVE-2022-22221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22221"
},
{
"name": "CVE-2022-22212",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22212"
},
{
"name": "CVE-2017-16548",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16548"
},
{
"name": "CVE-2021-36690",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36690"
},
{
"name": "CVE-2014-9939",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9939"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2015-3308",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3308"
},
{
"name": "CVE-2017-7614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7614"
},
{
"name": "CVE-2022-22202",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22202"
},
{
"name": "CVE-2017-8421",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8421"
},
{
"name": "CVE-2017-14062",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14062"
},
{
"name": "CVE-2018-14718",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14718"
},
{
"name": "CVE-2022-22218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22218"
},
{
"name": "CVE-2017-10684",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10684"
},
{
"name": "CVE-2022-22210",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22210"
},
{
"name": "CVE-2017-13716",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-13716"
},
{
"name": "CVE-2021-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
},
{
"name": "CVE-2015-5602",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5602"
},
{
"name": "CVE-2018-11307",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11307"
},
{
"name": "CVE-2018-19360",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19360"
},
{
"name": "CVE-2017-17434",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17434"
},
{
"name": "CVE-2017-8287",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8287"
},
{
"name": "CVE-2017-8804",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-8804"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-650",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69723 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Security-Director-Policy-Enforcer-upgraded-to-CentOS-7-9"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69722 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release-CVE-2022-22218"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69713 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-RIB-and-PFEs-can-get-out-of-sync-due-to-a-memory-leak-caused-by-interface-flaps-or-route-churn-CVE-2022-22209"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69710 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-series-The-PFE-will-crash-when-specific-traffic-is-scanned-by-Enhanced-Web-Filtering-safe-search-CVE-2022-22206"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69717 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Denial-of-Service-DoS-vulnerability-in-RPD-upon-receipt-of-specific-BGP-update-CVE-2022-22213"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69707 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-Receipt-of-specific-traffic-will-lead-to-an-fxpc-process-crash-followed-by-an-FPC-reboot-CVE-2022-22203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69714 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX5000-Series-and-MX-Series-An-l2alm-crash-leading-to-an-FPC-crash-can-be-observed-in-VxLAN-scenario-CVE-2022-22210"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69718 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-In-an-MPLS-scenario-upon-receipt-of-a-specific-IPv6-packet-an-FPC-will-crash-CVE-2022-22214"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69726 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Contrail-Networking-Multiple-vulnerabilities-resolved-in-Contrail-Networking-21-4"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69711 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-with-MPC11-In-a-GNF-node-slicing-scenario-gathering-AF-interface-statistics-can-lead-to-a-kernel-crash-CVE-2022-22207"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69715 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-OpenSSL-security-fixes"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69708 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-MX-Series-and-SRX-Series-When-receiving-a-specific-SIP-packets-stale-call-table-entries-are-created-which-eventually-leads-to-a-DoS-for-all-SIP-traffic-CVE-2022-22204"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69716 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-Evolved-A-high-rate-of-specific-hostbound-traffic-will-cause-unexpected-hostbound-traffic-delays-or-drops-CVE-2022-22212"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69719 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-var-run-pid-env-files-are-potentially-not-deleted-during-termination-of-a-gRPC-connection-causing-inode-exhaustion-CVE-2022-22215"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69703 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Northstar-Controller-nginx-component-allows-remote-attacker-to-cause-worker-process-crash-or-potentially-arbitrary-code-execution-CVE-2021-23017-2"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69721 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-QFX10k-Series-Denial-of-Service-DoS-upon-receipt-of-crafted-MLD-packets-on-multi-homing-ESI-in-VXLAN-CVE-2022-22217"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69720 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-Etherleak-memory-disclosure-in-Ethernet-padding-data-CVE-2022-22216"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69725 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-and-EX-Series-Local-privilege-escalation-flaw-in-download-functionality-CVE-2022-22221"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69705 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-in-SQLite-resolved"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69709 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-SRX-Series-An-FPC-memory-leak-can-occur-in-an-APBR-scenario-CVE-2022-22205"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69706 du 13 juillet 2022",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-PTX-Series-FPCs-may-restart-unexpectedly-upon-receipt-of-specific-MPLS-packets-with-certain-multi-unit-interface-configurations-CVE-2022-22202"
}
]
}
BDU:2020-01597
Vulnerability from fstec - Published: 15.03.2019
VLAI
Title
Уязвимость библиотеки libseccomp, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Description
Уязвимость библиотеки libseccomp связана с недостатками разграничения доступа к некоторым функциям. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Severity
Vendor
Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Novell Inc., АО "НППКТ"
Software Name
Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, Astra Linux Special Edition (запись в едином реестре российских программ №369), Astra Linux Common Edition (запись в едином реестре российских программ №4433), OpenSUSE Leap, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), libseccomp, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
Software Version
7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), 9 (Debian GNU/Linux), 18.04 LTS (Ubuntu), 18.10 (Ubuntu), 1.6 «Смоленск» (Astra Linux Special Edition), 19.04 (Ubuntu), 2.12 «Орёл» (Astra Linux Common Edition), 15.0 (OpenSUSE Leap), 15.1 (OpenSUSE Leap), 14.04 ESM (Ubuntu), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 8.1 «Ленинград» (Astra Linux Special Edition для «Эльбрус»), до 2.4.0 (libseccomp), 1.7 (Astra Linux Special Edition), 4.7 (Astra Linux Special Edition), до 2.5 (ОСОН ОСнова Оnyx)
Possible Mitigations
Использование рекомендаций:
Для libseccomp:
Обновление библиотеки libseccomp до актуальной версии
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/errata/RHSA-2019:3624
Для программных продуктов Novell Inc.:
https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html
https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html
Для Ubuntu:
https://usn.ubuntu.com/4001-1/
https://usn.ubuntu.com/4001-2/
Для Astra Linux:
Обновление программного обеспечения (пакета libseccomp) до 2.5.1-1 или более поздней версии
https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16
https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
Для Debian:
Использование рекомендаций производителя: https://security-tracker.debian.org/tracker/CVE-2019-9893
Для ОСОН Основа:
Обновление программного обеспечения libseccomp до версии 2.5.1-1+deb11u1
Reference
https://access.redhat.com/errata/RHSA-2019:3624
https://github.com/seccomp/libseccomp/issues/139
https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html
https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html
https://nvd.nist.gov/vuln/detail/CVE-2019-9893
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9893.html?_ga=2.50556394.214113060.1559032785-1618695258.1547637860
https://seclists.org/oss-sec/2019/q1/179
https://security-tracker.debian.org/tracker/CVE-2019-9893
https://usn.ubuntu.com/4001-1/
https://usn.ubuntu.com/4001-2/
https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
https://www.suse.com/security/cve/CVE-2019-9893/
https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.5/
CWE
CWE-264
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat Inc., Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Novell Inc., \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), 9 (Debian GNU/Linux), 18.04 LTS (Ubuntu), 18.10 (Ubuntu), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 19.04 (Ubuntu), 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (Astra Linux Common Edition), 15.0 (OpenSUSE Leap), 15.1 (OpenSUSE Leap), 14.04 ESM (Ubuntu), 8 (Debian GNU/Linux), 10 (Debian GNU/Linux), 8.1 \u00ab\u041b\u0435\u043d\u0438\u043d\u0433\u0440\u0430\u0434\u00bb (Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb), \u0434\u043e 2.4.0 (libseccomp), 1.7 (Astra Linux Special Edition), 4.7 (Astra Linux Special Edition), \u0434\u043e 2.5 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f libseccomp:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libseccomp \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/errata/RHSA-2019:3624\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Novell Inc.:\nhttps://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\nhttps://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\n\n\u0414\u043b\u044f Ubuntu:\nhttps://usn.ubuntu.com/4001-1/\nhttps://usn.ubuntu.com/4001-2/\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 libseccomp) \u0434\u043e 2.5.1-1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16\nhttps://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47\n\n\u0414\u043b\u044f Debian:\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://security-tracker.debian.org/tracker/CVE-2019-9893\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0441\u043d\u043e\u0432\u0430:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f libseccomp \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.5.1-1+deb11u1",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "15.03.2019",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "18.10.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.04.2020",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-01597",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-9893",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), OpenSUSE Leap, Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211611156), libseccomp, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat Inc. Red Hat Enterprise Linux 7 IA-32, Canonical Ltd. Ubuntu 16.04 LTS 32-bit, Red Hat Inc. Red Hat Enterprise Linux 7 , Canonical Ltd. Ubuntu 16.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Canonical Ltd. Ubuntu 18.04 LTS , Canonical Ltd. Ubuntu 18.10 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Canonical Ltd. Ubuntu 19.04 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Novell Inc. OpenSUSE Leap 15.0 32-bit, Novell Inc. OpenSUSE Leap 15.0 , Novell Inc. OpenSUSE Leap 15.1 , Canonical Ltd. Ubuntu 14.04 ESM , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb 8.1 \u00ab\u041b\u0435\u043d\u0438\u043d\u0433\u0440\u0430\u0434\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211611156), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libseccomp, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libseccomp \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://access.redhat.com/errata/RHSA-2019:3624\nhttps://github.com/seccomp/libseccomp/issues/139\nhttps://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html\nhttps://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-9893\nhttps://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9893.html?_ga=2.50556394.214113060.1559032785-1618695258.1547637860\nhttps://seclists.org/oss-sec/2019/q1/179\nhttps://security-tracker.debian.org/tracker/CVE-2019-9893\nhttps://usn.ubuntu.com/4001-1/\nhttps://usn.ubuntu.com/4001-2/\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16\nhttps://www.suse.com/security/cve/CVE-2019-9893/\nhttps://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.5/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,8)"
}
FKIE_CVE-2019-9893
Vulnerability from fkie_nvd - Published: 2019-03-21 16:01 - Updated: 2024-11-21 04:52
Severity
Summary
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html | ||
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html | ||
| cve@mitre.org | https://access.redhat.com/errata/RHSA-2019:3624 | ||
| cve@mitre.org | https://github.com/seccomp/libseccomp/issues/139 | Patch | |
| cve@mitre.org | https://seclists.org/oss-sec/2019/q1/179 | Mailing List, Patch, Third Party Advisory | |
| cve@mitre.org | https://security.gentoo.org/glsa/201904-18 | ||
| cve@mitre.org | https://usn.ubuntu.com/4001-1/ | ||
| cve@mitre.org | https://usn.ubuntu.com/4001-2/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2019:3624 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/seccomp/libseccomp/issues/139 | Patch | |
| af854a3a-2127-422b-91ae-364da2661108 | https://seclists.org/oss-sec/2019/q1/179 | Mailing List, Patch, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201904-18 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4001-1/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4001-2/ |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| libseccomp_project | libseccomp | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:libseccomp_project:libseccomp:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BC9691EE-D2ED-4905-8526-FD0E8043B577",
"versionEndExcluding": "2.4.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations."
},
{
"lang": "es",
"value": "libseccomp, en versiones anteriores a la 2.4.0, no gener\u00f3 correctamente las comparaciones del argumento syscall de 64 bits mediante los operadores aritm\u00e9ticos (LT, GT, LE, GE), lo que podr\u00eda conducir a la omisi\u00f3n de los filtros seccomp y a un potencial escalado de privilegios."
}
],
"id": "CVE-2019-9893",
"lastModified": "2024-11-21T04:52:31.370",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-03-21T16:01:17.687",
"references": [
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"source": "cve@mitre.org",
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"source": "cve@mitre.org",
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"source": "cve@mitre.org",
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://usn.ubuntu.com/4001-2/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-8QF7-26P9-J472
Vulnerability from github – Published: 2022-05-13 01:23 – Updated: 2022-05-13 01:23
VLAI
Details
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
Severity
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2019-9893"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-03-21T16:01:00Z",
"severity": "CRITICAL"
},
"details": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.",
"id": "GHSA-8qf7-26p9-j472",
"modified": "2022-05-13T01:23:07Z",
"published": "2022-05-13T01:23:07Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9893"
},
{
"type": "WEB",
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
},
{
"type": "WEB",
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4001-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4001-2"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2019-9893
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-9893",
"description": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.",
"id": "GSD-2019-9893",
"references": [
"https://www.suse.com/security/cve/CVE-2019-9893.html",
"https://access.redhat.com/errata/RHSA-2019:3624",
"https://ubuntu.com/security/CVE-2019-9893",
"https://advisories.mageia.org/CVE-2019-9893.html",
"https://security.archlinux.org/CVE-2019-9893",
"https://linux.oracle.com/cve/CVE-2019-9893.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-9893"
],
"details": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.",
"id": "GSD-2019-9893",
"modified": "2023-12-13T01:23:47.564640Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-9893",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/seccomp/libseccomp/issues/139",
"refsource": "MISC",
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"name": "https://seclists.org/oss-sec/2019/q1/179",
"refsource": "MISC",
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"name": "GLSA-201904-18",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"name": "USN-4001-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"name": "USN-4001-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"name": "openSUSE-SU-2019:2283",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"name": "openSUSE-SU-2019:2280",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"name": "RHSA-2019:3624",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:libseccomp_project:libseccomp:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.4.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-9893"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://seclists.org/oss-sec/2019/q1/179",
"refsource": "MISC",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://seclists.org/oss-sec/2019/q1/179"
},
{
"name": "https://github.com/seccomp/libseccomp/issues/139",
"refsource": "MISC",
"tags": [
"Patch"
],
"url": "https://github.com/seccomp/libseccomp/issues/139"
},
{
"name": "GLSA-201904-18",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201904-18"
},
{
"name": "USN-4001-1",
"refsource": "UBUNTU",
"tags": [],
"url": "https://usn.ubuntu.com/4001-1/"
},
{
"name": "USN-4001-2",
"refsource": "UBUNTU",
"tags": [],
"url": "https://usn.ubuntu.com/4001-2/"
},
{
"name": "openSUSE-SU-2019:2283",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html"
},
{
"name": "openSUSE-SU-2019:2280",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html"
},
{
"name": "RHSA-2019:3624",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2019:3624"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2020-08-24T17:37Z",
"publishedDate": "2019-03-21T16:01Z"
}
}
}
ICSA-24-284-16
Vulnerability from csaf_cisa - Published: 2024-10-10 06:00 - Updated: 2024-10-10 06:00Summary
Rockwell Automation DataMosaix Private Cloud
Notes
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation: Successful exploitation of these vulnerabilities could cause a denial-of-service condition, view customer data, or perform remote code execution.
Critical infrastructure sectors: Critical Manufacturing
Countries/areas deployed: Worldwide
Company headquarters location: United States
Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:
Recommended Practices: Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolating them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices: No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
7.5 (High)
8.1 (High)
7.8 (High)
7.5 (High)
9.8 (Critical)
7.5 (High)
References
23 references
| URL | Category |
|---|---|
| https://raw.githubusercontent.com/cisagov/CSAF/de… | self |
| https://www.cisa.gov/news-events/ics-advisories/i… | self |
| https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-… | external |
| https://www.cisa.gov/resources-tools/resources/ic… | external |
| https://www.cisa.gov/sites/default/files/publicat… | external |
| https://www.cisa.gov/topics/industrial-control-systems | external |
| https://us-cert.cisa.gov/sites/default/files/reco… | external |
| https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B | external |
| https://www.cisa.gov/uscert/sites/default/files/p… | external |
| https://www.cisa.gov/uscert/ncas/tips/ST04-014 | external |
| https://www.cve.org/CVERecord?id=CVE-2019-14855 | external |
| https://www.first.org/cvss/calculator/3.1#CVSS:3.… | external |
| https://www.first.org/cvss/calculator/4.0#CVSS:4.… | external |
| https://www.cve.org/CVERecord?id=CVE-2019-17543 | external |
| https://www.first.org/cvss/calculator/3.1#CVSS:3.… | external |
| https://www.first.org/cvss/calculator/4.0#CVSS:4.… | external |
| https://www.cve.org/CVERecord?id=CVE-2019-18276 | external |
| https://www.first.org/cvss/calculator/3.1#CVSS:3.… | external |
| https://www.first.org/cvss/calculator/4.0#CVSS:4.… | external |
| https://www.cve.org/CVERecord?id=CVE-2019-19244 | external |
| https://www.cve.org/CVERecord?id=CVE-2019-9893 | external |
| https://www.first.org/cvss/calculator/3.1#CVSS:3.… | external |
| https://www.cve.org/CVERecord?id=CVE-2019-9923 | external |
Acknowledgments
Rockwell Automation
{
"document": {
"acknowledgments": [
{
"organization": "Rockwell Automation",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could cause a denial-of-service condition, view customer data, or perform remote code execution.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "United States",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-24-284-16 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-284-16.json"
},
{
"category": "self",
"summary": "ICSA Advisory ICSA-24-284-16 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-16"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
}
],
"title": "Rockwell Automation DataMosaix Private Cloud",
"tracking": {
"current_release_date": "2024-10-10T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-24-284-16",
"initial_release_date": "2024-10-10T06:00:00.000000Z",
"revision_history": [
{
"date": "2024-10-10T06:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Initial Publication"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=7.07",
"product": {
"name": "Rockwell Automation DataMosaix Private Cloud: \u003c=7.07",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "DataMosaix Private Cloud"
}
],
"category": "vendor",
"name": "Rockwell Automation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14855",
"cwe": {
"id": "CWE-326",
"name": "Inadequate Encryption Strength"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes GnuPG which contains a certificate signature vulnerability found in the SHA-1 algorithm. A threat actor could use this weakness to create forged certificate signatures. If exploited, a malicious user could view customer data. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14855"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2019-17543",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes LZ4 which contains a heap-based buffer overflow vulnerability in versions before 1.9.2 (related to LZ4_compress_destSize), that affects applications that call LZ4_compress_fast with a large input. This issue can also lead to data corruption. If exploited, a malicious actor could perform a remote code execution. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17543"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2019-18276",
"cwe": {
"id": "CWE-273",
"name": "Improper Check for Dropped Privileges"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes shell.c which contains a vulnerability in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. A threat actor with command execution in the shell can use \"enable -f\" for runtime loading to gain privileges. If exploited, a malicious actor could perform a remote code execution. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2019-19244",
"cwe": {
"id": "CWE-1357",
"name": "Reliance on Insufficiently Trustworthy Component"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes SQLite 3.30.1 which contains a vulnerability in sqlite3Select in select.c that allows a crash if a subselect uses both DISTINCT and window functions and has certain ORDER BY usage. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19244"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2019-9893",
"cwe": {
"id": "CWE-1357",
"name": "Reliance on Insufficiently Trustworthy Component"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes libseccomp, which contains a vulnerability in versions 2.4.0 and earlier that does not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE). This vulnerability could lead to bypassing seccomp filters and potential privilege escalations. If exploited, a malicious actor could perform a remote code execution. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9893"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2019-9923",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "DataMosaix Private Cloud utilizes GNU Tar, which contains a vulnerability in pax_decode_header in sparse.c in versions before 1.32. pax_decode_header has a NULL pointer dereference when parsing certain archives that have malformed extended headers. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. ",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9923"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
},
{
"category": "mitigation",
"details": "For more information about this issue, please see the advisory on the Rockwell Automation security page.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
]
}
]
}
NCSC-2025-0382
Vulnerability from csaf_ncscnl - Published: 2025-12-09 13:15 - Updated: 2025-12-09 13:15Summary
Kwetsbaarheden verholpen in Siemens producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
Interpretaties: De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- (Remote) code execution (root/admin rechten)
- Toegang tot systeemgegevens
- Toegang tot gevoelige gegevens
- Verhogen van rechten
De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen: Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-126: Buffer Over-read
CWE-129: Improper Validation of Array Index
CWE-141: Improper Neutralization of Parameter/Argument Delimiters
CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
CWE-178: Improper Handling of Case Sensitivity
CWE-190: Integer Overflow or Wraparound
CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-192: Integer Coercion Error
CWE-193: Off-by-one Error
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-201: Insertion of Sensitive Information Into Sent Data
CWE-203: Observable Discrepancy
CWE-204: Observable Response Discrepancy
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
CWE-264: CWE-264
CWE-268: Privilege Chaining
CWE-271: Privilege Dropping / Lowering Errors
CWE-276: Incorrect Default Permissions
CWE-281: Improper Preservation of Permissions
CWE-284: Improper Access Control
CWE-285: Improper Authorization
CWE-287: Improper Authentication
CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-294: Authentication Bypass by Capture-replay
CWE-295: Improper Certificate Validation
CWE-303: Incorrect Implementation of Authentication Algorithm
CWE-306: Missing Authentication for Critical Function
CWE-310: CWE-310
CWE-311: Missing Encryption of Sensitive Data
CWE-319: Cleartext Transmission of Sensitive Information
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-328: Use of Weak Hash
CWE-340: Generation of Predictable Numbers or Identifiers
CWE-347: Improper Verification of Cryptographic Signature
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-354: Improper Validation of Integrity Check Value
CWE-358: Improperly Implemented Security Check for Standard
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-384: Session Fixation
CWE-385: Covert Timing Channel
CWE-399: CWE-399
CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-407: Inefficient Algorithmic Complexity
CWE-414: Missing Lock Check
CWE-415: Double Free
CWE-416: Use After Free
CWE-440: Expected Behavior Violation
CWE-476: NULL Pointer Dereference
CWE-502: Deserialization of Untrusted Data
CWE-665: Improper Initialization
CWE-667: Improper Locking
CWE-668: Exposure of Resource to Wrong Sphere
CWE-681: Incorrect Conversion between Numeric Types
CWE-732: Incorrect Permission Assignment for Critical Resource
CWE-754: Improper Check for Unusual or Exceptional Conditions
CWE-763: Release of Invalid Pointer or Reference
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-787: Out-of-bounds Write
CWE-798: Use of Hard-coded Credentials
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-862: Missing Authorization
CWE-863: Incorrect Authorization
CWE-909: Missing Initialization of Resource
CWE-918: Server-Side Request Forgery (SSRF)
CWE-940: Improper Verification of Source of a Communication Channel
CWE-1214: CWE-1214
CWE-1287: Improper Validation of Specified Type of Input
CWE-1333: Inefficient Regular Expression Complexity
A vulnerability in shadow 4.5's newgidmap allows unprivileged users to exploit user namespaces, potentially bypassing access restrictions set by administrators.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GnuPG versions 2.2.4 and 2.2.5 have a vulnerability (CVE-2018-9234) that allows remote attackers to bypass security restrictions by using a signing subkey for key certification without enforcing the offline master Certify key.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The 'remember_Ktype' function in cplus-dem.c of GNU libiberty, present in GNU Binutils 2.30, is susceptible to excessive memory consumption, which may result in out-of-memory conditions during cxxfilt execution.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The libseccomp 2.4.1 update resolves a BPF generation bug, enhances syscall tables, addresses CVE-2019-9893, and improves support for various architectures while fixing prior 64-bit syscall argument comparison issues.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The updates for ClamAV version 0.103.0 and bzip2 address multiple security vulnerabilities, including non-blocking database reloads in ClamAV and out-of-bounds writes in bzip2, enhancing overall functionality and security.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Versions of cpio prior to 2.13 have a vulnerability due to improper input validation when generating TAR archives, allowing unauthorized file permissions and paths that could compromise systems upon extraction by high-privilege users.
7.3 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and its components, including json-c and libfastjson, have multiple vulnerabilities, particularly an integer overflow and out-of-bounds write issue (CVE-2020-12762) affecting large JSON files, allowing potential arbitrary code execution.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The libcpu component of elfutils version 0.177 has a denial-of-service vulnerability that can be exploited by attackers through specially crafted ELF files, leading to application crashes.
5.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
C-ares versions before 1.16.1 and up to 1.17.0 have a buffer overflow vulnerability in the ares_parse_soa_reply function, addressed by the libcares2 update for CVE-2020-22217.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A NULL pointer dereference vulnerability in SQLite 3.31.1 can cause out-of-memory errors during INTERSECT query processing, potentially leading to Denial of Service attacks in affected NetApp products.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities related to TLS ciphers, memory allocation, and keystore corruption, while Oracle Java SE and GraalVM have critical vulnerabilities allowing unauthorized access to sensitive data.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as memory allocation issues and weak cipher preferences, while also enhancing functionalities and updating to newer service refreshes.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK and Oracle Java SE address multiple vulnerabilities, including weak TLS ciphers, excessive memory allocations, and denial of service risks across various versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for IBM and OpenJDK Java versions address various vulnerabilities, including excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several releases.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Java, including OpenJDK and Oracle Java SE, address multiple vulnerabilities related to memory allocation, TLS issues, and unauthorized access, with CVSS scores indicating significant risks.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Java SE, OpenJDK, and Oracle GraalVM address multiple vulnerabilities, including memory allocation issues, weak TLS ciphers, and denial of service risks, affecting various supported versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several versions.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for IBM Java and OpenJDK address multiple vulnerabilities, including memory allocation issues and weak cipher preferences, while also enhancing versions to Java 7.1 SR5, Java 8.0 SR7, and OpenJDK 8u312 and 7u321.
CWE-20 - Improper Input ValidationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities, including TLS cipher issues and memory allocation problems, while Oracle Java SE and GraalVM Enterprise Edition have vulnerabilities that could compromise data confidentiality.
CWE-203 - Observable DiscrepancyAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including use-after-free and Denial of Service risks, potentially allowing attackers to execute arbitrary code or cause service disruptions.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and products, particularly those utilizing SELinux.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution, affecting various components and requiring user interaction or elevated privileges for exploitation.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat Enterprise Linux and SELinux 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and requiring user interaction or elevated privileges for exploitation.
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GNU cpio version 2.13 is vulnerable to remote code execution due to an integer overflow in the ds_fgetstr function when processing specially crafted pattern files.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks and use-after-free issues, across various kernel versions and components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 12 and 15 SP5 kernels, including RT and Azure variants, were updated to address multiple security vulnerabilities such as memory leaks and use-after-free issues, enhancing overall system security.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels and Linux Kernel versions have been updated to address multiple security vulnerabilities, including memory corruption, race conditions, and remote stack overflow issues, alongside various non-security bug fixes.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple security vulnerabilities, including privilege escalation, memory corruption, and transient execution side-channel attacks across several service packs.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including privilege escalation and memory access issues, alongside mitigations for transient execution side-channel attacks.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) were updated to address various security vulnerabilities, including memory leaks, use-after-free, double free issues, and information leak flaws.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates were released for SUSE Linux Enterprise kernels addressing various security vulnerabilities and non-security bugs, including memory management issues, privilege escalation risks, and access control flaws.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across multiple versions have been updated to address various security vulnerabilities, including RETBLEED, use-after-free issues, and non-security bug fixes, enhancing overall system stability.
CWE-416 - Use After FreeAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernel updates across various versions address multiple security vulnerabilities, including race conditions, use-after-free issues, and denial of service, alongside non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels addressed multiple security vulnerabilities, including use-after-free and memory corruption issues, across several versions and components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple critical security vulnerabilities, including use-after-free and memory corruption issues, across several components and drivers.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across SUSE Linux Enterprise and Linux Kernel versions addressed various security vulnerabilities, including buffer overflows, use-after-free issues, and the RETBLEED attack, alongside non-security bug fixes.
7.0 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to SUSE Linux Enterprise kernels and Google Android address multiple security vulnerabilities, including privilege escalations and memory leaks, while NetApp products face risks from flaws in Linux Kernel versions up to 5.16.8.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP3 and RT kernels were updated to address multiple security vulnerabilities, including CVEs for memory leaks, privilege escalations, and a specific out-of-array access issue in the udc-xilinx driver.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) and various Linux Kernel versions were updated to address multiple security vulnerabilities, including memory leaks, use-after-free, and double free issues.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated attackers to exploit improper validation of POST request parameters, potentially leading to denial of service or arbitrary code execution.
CWE-141 - Improper Neutralization of Parameter/Argument DelimitersAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T devices (versions < V3.0) allows unauthenticated attackers to exploit improper validation of GET and POST request parameters, leading to potential denial of service or arbitrary code execution.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to capture unencrypted HTTP web traffic, potentially disrupting device functionality.
CWE-319 - Cleartext Transmission of Sensitive InformationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit reflected XSS attacks due to improper handling of GET request parameters reflected in the web server response.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit unencrypted challenge-response communication, potentially gaining access to the device's management interface.
CWE-294 - Authentication Bypass by Capture-replayAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated users to access critical device information due to inadequate access protection in the web-based management interface.
CWE-306 - Missing Authentication for Critical FunctionAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows authenticated attackers to exploit improper input validation in the configuration interface, enabling persistent XSS attacks affecting logged-in users.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated users to access internal configuration details due to inadequate access protection in the web-based management interface.
CWE-306 - Missing Authentication for Critical FunctionAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM T (versions < V3.0) allows unauthenticated attackers to exploit improper file handling for XSS attacks, potentially enabling actions on behalf of legitimate users via error logs.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Vulnerabilities in SICAM P850, P855, and T devices (all versions < V3.00) allow unauthenticated access to web interface pages, enabling attackers to delete log files without authentication.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent kernel updates for SUSE Linux Enterprise and various Linux Kernel versions addressed multiple security vulnerabilities, including the RETBLEED attack, use-after-free issues, buffer overflows, and restriction bypasses related to the PT_SUSPEND_SECCOMP flag.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Vulnerabilities in SiPass integrated AC5102 and ACC-AP devices allow local and remote attackers to upload or modify firmware due to inadequate integrity checks during firmware updates.
6.2 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
GnuPGP has multiple vulnerabilities, including signature forgery and status injection issues, while recent updates to gpg2 and Docker images for Dagster-cloud and Spectrafit address these security concerns.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The Linux kernel prior to version 5.18.13 contains a vulnerability in the block starting symbol (.bss) that may allow Xen PV guest OS users to perform denial of service attacks or escalate privileges.
CWE-311 - Missing Encryption of Sensitive DataAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Quagga and FRRouting address multiple vulnerabilities, including sensitive information disclosure and denial of service risks due to BGP processing issues and out-of-bounds read vulnerabilities.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to VLC, Oracle products, zlib, and Dagster-cloud address various vulnerabilities, including critical issues in Oracle systems and security fixes in zlib and opencv-python.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850, P855, and T devices allows session takeover due to the acceptance of user-defined session cookies without renewal after login/logout.
CWE-384 - Session FixationAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850, P855 (all versions < V3.10) and SICAM T (all versions < V3.0) devices allows unauthenticated attackers to execute arbitrary code or cause denial of service due to improper GET request parameter validation.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels addressed critical security vulnerabilities, including stack overflows, denial of service, memory leaks, and use-after-free issues, enhancing overall system stability and security.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in POWER METER models SICAM Q100, P850, P855, and T allows authenticated remote attackers to crash the device or execute arbitrary code due to improper validation of the Language-parameter in web interface requests.
9.9 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Red Hat OpenShift and multiple NetApp products have vulnerabilities in components like 'less', allowing local attackers to execute arbitrary commands, manipulate files, or disclose sensitive information due to improper handling of shell metacharacters.
8.4 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5, 15 SP2, SP3, SP4, and SP5 were updated to address multiple security vulnerabilities, including use-after-free issues, memory leaks, and kernel panics.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, null pointer dereferences, and race conditions, with numerous CVEs resolved.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP3, SP4, and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, race conditions, and null pointer dereferences, along with various non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, use-after-free issues, and a buffer overflow in the USB gadget's setup handler.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP4/SP5, including Azure and RT variants, received updates addressing multiple security vulnerabilities such as memory leaks and use-after-free issues, alongside driver-related fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels, including 15 SP5, 15 SP4, and 12 SP5, addressed critical security vulnerabilities such as use-after-free and memory leaks in network and display drivers.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple updates across various SUSE Linux Enterprise kernels (15 SP5, 15 SP4, 15 SP3, 15 SP2, 12 SP5) addressed critical security vulnerabilities, including use-after-free and memory leak issues in network and display components.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise 15 SP5 and 12 SP5 kernels received updates addressing multiple security vulnerabilities, including memory leaks, use-after-free issues, and out-of-bounds access across various components.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including use-after-free issues and memory leaks in networking and display components.
7.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP3 to SP5 have been updated to address multiple security vulnerabilities, including race conditions, buffer overflows, and memory management issues, alongside various non-security bug fixes.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates address multiple vulnerabilities across various platforms, including Oracle Communications, Red Hat OpenShift, and shadow-utils, affecting user account management and potentially leading to unauthorized access and data leaks.
5.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python 3.11 and earlier versions address multiple security vulnerabilities, particularly in email parsing and libexpat, alongside various non-security improvements and fixes for CVEs.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for macOS Ventura, Monterey, and Big Sur address multiple security vulnerabilities, while curl updates fix various flaws, including use-after-free and information disclosure issues, alongside a critical vulnerability in Oracle Enterprise Manager.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The shadow update addresses CVE-2023-29383 related to /etc/shadow manipulation, resolves control character injection vulnerabilities in Shadow 4.13, and includes various non-security bug fixes.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for macOS Ventura, Monterey, and Big Sur address critical vulnerabilities, while Oracle, Red Hat OpenShift, and ncurses have multiple security flaws that could lead to system compromise and denial-of-service conditions.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
SICAM P850 and P855 devices (all versions < V3.11) are vulnerable to Cross-Site Request Forgery attacks, allowing unauthorized actions via malicious links targeting authenticated users.
CWE-352 - Cross-Site Request Forgery (CSRF)Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SICAM P850 and P855 devices (all versions < V3.11) allows attackers to impersonate legitimate users by exploiting missing cookie protection flags and accessing session tokens.
CWE-732 - Incorrect Permission Assignment for Critical ResourceAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The frr and quagga updates address multiple vulnerabilities, including issues with BGP attributes, zero-length NLRIs, and denial of service risks, enhancing overall stability and security.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities across Oracle Communications products, curl, and Siemens products allow unauthorized access, data manipulation, and potential Denial-of-Service, with CVSS scores of 6.5 for specific Oracle vulnerabilities.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The FRRouting 8.5.6 update addresses multiple vulnerabilities, including crashes from crafted BGP UPDATE messages and malformed MP_REACH_NLRI data, while enhancing PIM/PIMv6/BGP and VRF support.
5.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The frr 8.5.6 update addresses multiple vulnerabilities in BGP UPDATE processing, including denial-of-service issues and crashes from malformed messages and improper attribute handling.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python interpreters and Oracle Database Server address multiple security vulnerabilities, including denial of service risks and memory race conditions, alongside various bug fixes and enhancements.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to Python address multiple security vulnerabilities, including buffer overreads and email header injection, affecting versions up to 3.9 and impacting various NetApp products.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to various Python versions address multiple vulnerabilities, including denial of service and excessive resource consumption, particularly in the tarfile and http.cookies modules, alongside Oracle Database patches for significant vulnerabilities.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for various Python versions, including venv-salt-minion, address multiple security vulnerabilities, particularly email header injection and resource consumption issues, alongside numerous bug fixes and enhancements.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python 3.x and Oracle products address multiple security vulnerabilities, including denial of service, excessive resource consumption, and email header injection, with varying severity levels across different versions.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities in curl and Oracle products, including credential leakage and unauthorized data access, affect various versions of software, notably impacting cURL and Oracle Communications Unified Assurance.
9.1 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates for Python address CVE-2024-11168, fixing improper validation of IPv6 and IPvFuture addresses, and resolving vulnerabilities in the `urllib.parse.urlsplit()` and `urlparse()` functions that could lead to SSRF exploits.
CWE-1287 - Improper Validation of Specified Type of InputAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities affecting Oracle Communications EAGLE LNP Application Processor, Oracle Cloud Native Core Policy, and GNU libtasn1 could lead to denial of service attacks, with CVSS scores of 5.3 for some products.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A flaw in GnuTLS related to inefficient DER decoding in libtasn1 can lead to denial-of-service conditions, affecting multiple NetApp products and identified as CVE-2024-12243.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The util-linux update addresses critical vulnerabilities, particularly in the 'wall' command, neutralizing escape sequences to prevent account takeover and other potential exploits in versions up to 2.40.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The Less text file viewer has an OS command execution vulnerability due to mishandled newline characters in file names, affecting multiple NetApp products and allowing remote command execution when the LESSOPEN variable is set.
8.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
DOMPurify has addressed a nesting-based mXSS vulnerability in versions 2.5.0 and 3.1.3, while HPE Private Cloud AI has identified remote exploit vulnerabilities.
10.0 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Multiple vulnerabilities across Oracle Communications Cloud Native Core services and libexpat allow unauthenticated denial of service attacks, with CVSS scores of 5.9, affecting various versions and components.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent vulnerabilities in Oracle Communications Cloud Native Core and Gnome Glib versions prior to 2.82.1 expose systems to unauthorized access and buffer overflow risks, potentially leading to data compromise and service disruptions.
9.8 (Critical)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II (versions < V2.17.0) allows code injection in the DHCP Server configuration file, enabling attackers to gain root access via a reverse shell.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II family versions prior to V2.17.0 allows attackers to inject parameters during Dynamic DNS configuration, potentially leading to root access via a reverse shell.
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in the RUGGEDCOM ROX II family (versions < V2.17.0) allows attackers to gain root access through insufficient validation during configuration file handling.
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II devices (versions < V2.17.0) allows attackers to execute arbitrary code as root due to the SCEP client's failure to validate multiple fields during secure certificate enrollment.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM ROX II (versions < V2.17.0) allows code injection via VRF, enabling attackers to execute arbitrary code with root privileges.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in the RUGGEDCOM ROX II family (versions < V2.17.0) allows code injection via IPsec, enabling attackers to execute arbitrary code with root privileges.
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to Python versions 3.6, 3.11, 3.12, and 3.13.5 address security vulnerabilities related to improper URL parsing of domain names with square brackets, which violate RFC 3986 and could lead to unauthorized data manipulation.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Palo Alto Networks has addressed vulnerabilities in Prisma® Access Browser and highlighted a high-severity sandbox escape flaw in Google Chrome on Windows, linked to an incorrect handle in Mojo.
8.3 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Recent updates to curl (version 8.14.1) address critical security vulnerabilities, including cache poisoning risks in WebSocket code and a denial of service flaw in Oracle Communications Unified Inventory Management.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in various versions of COMOS, NX, Simcenter 3D, Simcenter Femap, and Solid Edge products allows for potential man-in-the-middle attacks due to the IAM client not validating server certificates for TLS connections.
7.4 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in COMOS, NX, Simcenter, and Tecnomatix products arises from the SALT SDK's failure to validate server certificates for TLS connections, risking man-in-the-middle attacks.
8.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in Gridscale X Prepay (versions < V4.2.1) allows unauthenticated remote attackers to perform user enumeration, potentially facilitating brute force attacks on valid users.
5.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in Gridscale X Prepay (versions < V4.2.1) allows locked-out users to exploit capture-replay of authentication tokens, enabling them to establish valid sessions.
6.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEMA Remote Connect Server (versions < V3.2 SP4) allows unauthorized access to private SSL/TLS keys, enabling attackers to impersonate the server and conduct man-in-the-middle attacks.
CWE-732 - Incorrect Permission Assignment for Critical ResourceAffected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEMA Remote Connect Server (versions < V3.2 SP4) allows unauthorized modification of the system_ticketinfo table, enabling database users to bypass licensing restrictions and modify database values directly.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The document outlines a vulnerability in certain products that lack TCP sequence number validation, enabling unauthenticated remote attackers to disrupt TCP-based services through the injection of spoofed IP packets.
7.5 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEC Security Monitor (versions < V4.10.0) allows lowly privileged authenticated local attackers to read or write any file on the server or sensor due to inadequate authorization checks.
6.7 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SINEC Security Monitor versions prior to V4.10.0 allows lowly privileged authenticated attackers to exploit input validation issues in the date parameter during report generation, potentially causing a denial of service.
6.5 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in RUGGEDCOM devices (versions below V5.10.1) allows authenticated remote attackers to exploit improper input validation during TLS certificate uploads, potentially leading to device crashes and Denial of Service.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) exposes sensitive firmware information, compromising the device's confidentiality, integrity, and availability.
8.1 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) allows an attacker with physical access to exploit an unauthenticated USB port, potentially causing a denial of service by triggering a reboot.
4.6 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (versions < V4.0.1) leads to inconsistent SNMP behavior, potentially allowing unauthorized access to sensitive data and compromising confidentiality.
4.9 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
A vulnerability in SIMATIC CN 4100 (all versions < V4.0.1) allows affected devices to expose server information in their responses, potentially aiding attackers with network access in targeted attacks.
4.3 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
Elspec G5 devices up to version 1.2.2.19 have a vulnerability that allows physical access to reset the Admin password using a USB drive with a specific reset string.
6.8 (Medium)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
The update for binutils version 2.32 addresses multiple security vulnerabilities, including memory access issues and buffer overflows, while also introducing support for new architectures.
7.8 (High)
Affected products
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Siemens / Building X - Security Manager Edge Controller (ACC-AP)
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.4.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.5.2
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / COMOS V10.6
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Energy Services
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Gridscale X Prepay
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2412
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / NX V2506
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SICAM
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU DIQ
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CFU PA
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC CN 4100
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC ET 200AL IM 157-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC MV540 H Firmware
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIMATIC S7
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC INS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC NMS
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEC PNI
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SINEMA Remote Connect Server
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS ET 200MP IM 155-5 PN HF
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS HCS4200 CIM4210
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS NET PN/PN Coupler
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1212 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1214 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1200 CPU 1215 AC/DC/RLY
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-1500 CPU 1511-1 PN
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / SIPLUS S7-300 CPU 314C-2 PN/DP
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2025
|
vers:unknown/* | ||
|
vers:unknown/*
Siemens / Solid Edge SE2026
|
vers:unknown/* |
References
138 references
| URL | Category |
|---|---|
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- (Remote) code execution (root/admin rechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n- Verhogen van rechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "general",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "general",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "general",
"text": "Improper Neutralization of Escape, Meta, or Control Sequences",
"title": "CWE-150"
},
{
"category": "general",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "general",
"text": "Integer Coercion Error",
"title": "CWE-192"
},
{
"category": "general",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Insertion of Sensitive Information Into Sent Data",
"title": "CWE-201"
},
{
"category": "general",
"text": "Observable Discrepancy",
"title": "CWE-203"
},
{
"category": "general",
"text": "Observable Response Discrepancy",
"title": "CWE-204"
},
{
"category": "general",
"text": "Improper Removal of Sensitive Information Before Storage or Transfer",
"title": "CWE-212"
},
{
"category": "general",
"text": "CWE-264",
"title": "CWE-264"
},
{
"category": "general",
"text": "Privilege Chaining",
"title": "CWE-268"
},
{
"category": "general",
"text": "Privilege Dropping / Lowering Errors",
"title": "CWE-271"
},
{
"category": "general",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "general",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "general",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "general",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Incorrect Implementation of Authentication Algorithm",
"title": "CWE-303"
},
{
"category": "general",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "general",
"text": "CWE-310",
"title": "CWE-310"
},
{
"category": "general",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "general",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "general",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "general",
"text": "Use of Weak Hash",
"title": "CWE-328"
},
{
"category": "general",
"text": "Generation of Predictable Numbers or Identifiers",
"title": "CWE-340"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "Improper Validation of Integrity Check Value",
"title": "CWE-354"
},
{
"category": "general",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Session Fixation",
"title": "CWE-384"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "CWE-399",
"title": "CWE-399"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "general",
"text": "Missing Lock Check",
"title": "CWE-414"
},
{
"category": "general",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Expected Behavior Violation",
"title": "CWE-440"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Improper Initialization",
"title": "CWE-665"
},
{
"category": "general",
"text": "Improper Locking",
"title": "CWE-667"
},
{
"category": "general",
"text": "Exposure of Resource to Wrong Sphere",
"title": "CWE-668"
},
{
"category": "general",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
},
{
"category": "general",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "general",
"text": "Improper Check for Unusual or Exceptional Conditions",
"title": "CWE-754"
},
{
"category": "general",
"text": "Release of Invalid Pointer or Reference",
"title": "CWE-763"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "general",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Missing Initialization of Resource",
"title": "CWE-909"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Improper Verification of Source of a Communication Channel",
"title": "CWE-940"
},
{
"category": "general",
"text": "CWE-1214",
"title": "CWE-1214"
},
{
"category": "general",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "general",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-202008.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-356310.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-416652.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-420375.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-471761.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-626856.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-710408.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-734261.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-868571.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-882673.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-912274.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-915282.html"
}
],
"title": "Kwetsbaarheden verholpen in Siemens producten",
"tracking": {
"current_release_date": "2025-12-09T13:15:05.391966Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2025-0382",
"initial_release_date": "2025-12-09T13:15:05.391966Z",
"revision_history": [
{
"date": "2025-12-09T13:15:05.391966Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Building X - Security Manager Edge Controller (ACC-AP)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "COMOS V10.4"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "COMOS V10.4.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "COMOS V10.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "COMOS V10.5.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "COMOS V10.6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "Energy Services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "Gridscale X Prepay"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "NX V2412"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "NX V2506"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "SICAM"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "SIMATIC CFU DIQ"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "SIMATIC CFU PA"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "SIMATIC CN 4100"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "SIMATIC ET 200AL IM 157-1 PN"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "SIMATIC MV540 H Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "SIMATIC PN/PN Coupler"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-18"
}
}
],
"category": "product_name",
"name": "SIMATIC S7"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-19"
}
}
],
"category": "product_name",
"name": "SINEC INS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-20"
}
}
],
"category": "product_name",
"name": "SINEC NMS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-21"
}
}
],
"category": "product_name",
"name": "SINEC PNI"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-22"
}
}
],
"category": "product_name",
"name": "SINEMA Remote Connect Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-23"
}
}
],
"category": "product_name",
"name": "SIPLUS ET 200MP IM 155-5 PN HF"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-24"
}
}
],
"category": "product_name",
"name": "SIPLUS HCS4200 CIM4210"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-25"
}
}
],
"category": "product_name",
"name": "SIPLUS NET PN/PN Coupler"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-26"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1212 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-27"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1214 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-28"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1200 CPU 1215 AC/DC/RLY"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-29"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1500 CPU 1511-1 PN"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-30"
}
}
],
"category": "product_name",
"name": "SIPLUS S7-300 CPU 314C-2 PN/DP"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-31"
}
}
],
"category": "product_name",
"name": "Solid Edge SE2025"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-32"
}
}
],
"category": "product_name",
"name": "Solid Edge SE2026"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-7169",
"cwe": {
"id": "CWE-271",
"name": "Privilege Dropping / Lowering Errors"
},
"notes": [
{
"category": "other",
"text": "Privilege Dropping / Lowering Errors",
"title": "CWE-271"
},
{
"category": "description",
"text": "A vulnerability in shadow 4.5\u0027s newgidmap allows unprivileged users to exploit user namespaces, potentially bypassing access restrictions set by administrators.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-7169 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-7169.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-7169"
},
{
"cve": "CVE-2018-9234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "GnuPG versions 2.2.4 and 2.2.5 have a vulnerability (CVE-2018-9234) that allows remote attackers to bypass security restrictions by using a signing subkey for key certification without enforcing the offline master Certify key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-9234 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-9234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-9234"
},
{
"cve": "CVE-2018-12934",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "description",
"text": "The \u0027remember_Ktype\u0027 function in cplus-dem.c of GNU libiberty, present in GNU Binutils 2.30, is susceptible to excessive memory consumption, which may result in out-of-memory conditions during cxxfilt execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-12934 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-12934.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-12934"
},
{
"cve": "CVE-2019-9893",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"notes": [
{
"category": "other",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "description",
"text": "The libseccomp 2.4.1 update resolves a BPF generation bug, enhances syscall tables, addresses CVE-2019-9893, and improves support for various architectures while fixing prior 64-bit syscall argument comparison issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-9893 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-9893.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-9893"
},
{
"cve": "CVE-2019-12900",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "CWE-1214",
"title": "CWE-1214"
},
{
"category": "description",
"text": "The updates for ClamAV version 0.103.0 and bzip2 address multiple security vulnerabilities, including non-blocking database reloads in ClamAV and out-of-bounds writes in bzip2, enhancing overall functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-12900 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-12900.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-12900"
},
{
"cve": "CVE-2019-14866",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Versions of cpio prior to 2.13 have a vulnerability due to improper input validation when generating TAR archives, allowing unauthorized file permissions and paths that could compromise systems upon extraction by high-privilege users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2019-14866 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-14866.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2019-14866"
},
{
"cve": "CVE-2020-12762",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and its components, including json-c and libfastjson, have multiple vulnerabilities, particularly an integer overflow and out-of-bounds write issue (CVE-2020-12762) affecting large JSON files, allowing potential arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-12762 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-12762.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-12762"
},
{
"cve": "CVE-2020-21047",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "The libcpu component of elfutils version 0.177 has a denial-of-service vulnerability that can be exploited by attackers through specially crafted ELF files, leading to application crashes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-21047 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-21047.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-21047"
},
{
"cve": "CVE-2020-22217",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "other",
"text": "Buffer Over-read",
"title": "CWE-126"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "C-ares versions before 1.16.1 and up to 1.17.0 have a buffer overflow vulnerability in the ares_parse_soa_reply function, addressed by the libcares2 update for CVE-2020-22217.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-22217 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-22217.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-22217"
},
{
"cve": "CVE-2020-35525",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "A NULL pointer dereference vulnerability in SQLite 3.31.1 can cause out-of-memory errors during INTERSECT query processing, potentially leading to Denial of Service attacks in affected NetApp products.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-35525 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2020/cve-2020-35525.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2020-35525"
},
{
"cve": "CVE-2021-35550",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities related to TLS ciphers, memory allocation, and keystore corruption, while Oracle Java SE and GraalVM have critical vulnerabilities allowing unauthorized access to sensitive data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35550 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35550.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35550"
},
{
"cve": "CVE-2021-35556",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35556 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35556.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35556"
},
{
"cve": "CVE-2021-35559",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "description",
"text": "Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as memory allocation issues and weak cipher preferences, while also enhancing functionalities and updating to newer service refreshes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35559 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35559.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35559"
},
{
"cve": "CVE-2021-35561",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Recent updates for OpenJDK and Oracle Java SE address multiple vulnerabilities, including weak TLS ciphers, excessive memory allocations, and denial of service risks across various versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35561 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35561.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35561"
},
{
"cve": "CVE-2021-35564",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Multiple updates for IBM and OpenJDK Java versions address various vulnerabilities, including excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several releases.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35564 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35564.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35564"
},
{
"cve": "CVE-2021-35565",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "other",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "description",
"text": "Recent updates for various Java versions, including IBM and OpenJDK, address multiple vulnerabilities related to memory allocation, weak cipher preferences, and denial of service risks, while enhancing functionality and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35565 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35565.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35565"
},
{
"cve": "CVE-2021-35567",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Recent updates for Java, including OpenJDK and Oracle Java SE, address multiple vulnerabilities related to memory allocation, TLS issues, and unauthorized access, with CVSS scores indicating significant risks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35567 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35567.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35567"
},
{
"cve": "CVE-2021-35578",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "Recent updates for Java SE, OpenJDK, and Oracle GraalVM address multiple vulnerabilities, including memory allocation issues, weak TLS ciphers, and denial of service risks, affecting various supported versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35578 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35578.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35578"
},
{
"cve": "CVE-2021-35586",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple updates for Java versions, including IBM and OpenJDK, address various vulnerabilities such as excessive memory allocation and weak cipher preferences, while also enhancing functionality and security across several versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35586 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35586.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35586"
},
{
"cve": "CVE-2021-35588",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for IBM Java and OpenJDK address multiple vulnerabilities, including memory allocation issues and weak cipher preferences, while also enhancing versions to Java 7.1 SR5, Java 8.0 SR7, and OpenJDK 8u312 and 7u321.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35588 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35588.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35588"
},
{
"cve": "CVE-2021-35603",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "other",
"text": "Observable Discrepancy",
"title": "CWE-203"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for OpenJDK versions 1.7, 1.8, and 11 address multiple vulnerabilities, including TLS cipher issues and memory allocation problems, while Oracle Java SE and GraalVM Enterprise Edition have vulnerabilities that could compromise data confidentiality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-35603 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-35603.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-35603"
},
{
"cve": "CVE-2021-36084",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including use-after-free and Denial of Service risks, potentially allowing attackers to execute arbitrary code or cause service disruptions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36084 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36084.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36084"
},
{
"cve": "CVE-2021-36085",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and products, particularly those utilizing SELinux.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36085 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36085.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36085"
},
{
"cve": "CVE-2021-36086",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux versions up to 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution, affecting various components and requiring user interaction or elevated privileges for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36086 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36086.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36086"
},
{
"cve": "CVE-2021-36087",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Red Hat Enterprise Linux and SELinux 3.2 have multiple vulnerabilities, including denial of service and arbitrary code execution risks, affecting various components and requiring user interaction or elevated privileges for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-36087 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-36087.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-36087"
},
{
"cve": "CVE-2021-38185",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "GNU cpio version 2.13 is vulnerable to remote code execution due to an integer overflow in the ds_fgetstr function when processing specially crafted pattern files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-38185 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-38185.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-38185"
},
{
"cve": "CVE-2021-47358",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks and use-after-free issues, across various kernel versions and components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-47358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-47358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-47358"
},
{
"cve": "CVE-2021-47361",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 12 and 15 SP5 kernels, including RT and Azure variants, were updated to address multiple security vulnerabilities such as memory leaks and use-after-free issues, enhancing overall system security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-47361 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2021/cve-2021-47361.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2021-47361"
},
{
"cve": "CVE-2022-0435",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels and Linux Kernel versions have been updated to address multiple security vulnerabilities, including memory corruption, race conditions, and remote stack overflow issues, alongside various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0435 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0435.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0435"
},
{
"cve": "CVE-2022-0492",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple security vulnerabilities, including privilege escalation, memory corruption, and transient execution side-channel attacks across several service packs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0492 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0492.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0492"
},
{
"cve": "CVE-2022-0847",
"cwe": {
"id": "CWE-909",
"name": "Missing Initialization of Resource"
},
"notes": [
{
"category": "other",
"text": "Missing Initialization of Resource",
"title": "CWE-909"
},
{
"category": "other",
"text": "Improper Initialization",
"title": "CWE-665"
},
{
"category": "other",
"text": "Improper Preservation of Permissions",
"title": "CWE-281"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including privilege escalation and memory access issues, alongside mitigations for transient execution side-channel attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0847 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0847.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0847"
},
{
"cve": "CVE-2022-0850",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) were updated to address various security vulnerabilities, including memory leaks, use-after-free, double free issues, and information leak flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-0850 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-0850.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-0850"
},
{
"cve": "CVE-2022-1353",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"notes": [
{
"category": "other",
"text": "Improper Removal of Sensitive Information Before Storage or Transfer",
"title": "CWE-212"
},
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Multiple updates were released for SUSE Linux Enterprise kernels addressing various security vulnerabilities and non-security bugs, including memory management issues, privilege escalation risks, and access control flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-1353 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-1353.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-1353"
},
{
"cve": "CVE-2022-1734",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across multiple versions have been updated to address various security vulnerabilities, including RETBLEED, use-after-free issues, and non-security bug fixes, enhancing overall system stability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-1734 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-1734.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-1734"
},
{
"cve": "CVE-2022-2639",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "other",
"text": "Incorrect Conversion between Numeric Types",
"title": "CWE-681"
},
{
"category": "other",
"text": "Integer Coercion Error",
"title": "CWE-192"
},
{
"category": "other",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernel updates across various versions address multiple security vulnerabilities, including race conditions, use-after-free issues, and denial of service, alongside non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-2639 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-2639.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-2639"
},
{
"cve": "CVE-2022-2964",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels addressed multiple security vulnerabilities, including use-after-free and memory corruption issues, across several versions and components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-2964 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-2964.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-2964"
},
{
"cve": "CVE-2022-3424",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Recent updates to various SUSE Linux Enterprise kernels and Linux Kernel versions addressed multiple critical security vulnerabilities, including use-after-free and memory corruption issues, across several components and drivers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3424 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-3424.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-3424"
},
{
"cve": "CVE-2022-20141",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "other",
"text": "Improper Locking",
"title": "CWE-667"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across SUSE Linux Enterprise and Linux Kernel versions addressed various security vulnerabilities, including buffer overflows, use-after-free issues, and the RETBLEED attack, alongside non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-20141 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-20141.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-20141"
},
{
"cve": "CVE-2022-23039",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-23039 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23039.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-23039"
},
{
"cve": "CVE-2022-23040",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, buffer overflows, and double free issues, alongside numerous non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-23040 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-23040.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-23040"
},
{
"cve": "CVE-2022-24958",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"notes": [
{
"category": "other",
"text": "Release of Invalid Pointer or Reference",
"title": "CWE-763"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to SUSE Linux Enterprise kernels and Google Android address multiple security vulnerabilities, including privilege escalations and memory leaks, while NetApp products face risks from flaws in Linux Kernel versions up to 5.16.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-24958 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-24958.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-24958"
},
{
"cve": "CVE-2022-27223",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP3 and RT kernels were updated to address multiple security vulnerabilities, including CVEs for memory leaks, privilege escalations, and a specific out-of-array access issue in the udc-xilinx driver.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-27223 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-27223.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-27223"
},
{
"cve": "CVE-2022-28390",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "other",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise kernels (12 SP2, SP3, SP4, SP5, and 15 SP1, SP3) and various Linux Kernel versions were updated to address multiple security vulnerabilities, including memory leaks, use-after-free, and double free issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-28390 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-28390.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-28390"
},
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated attackers to exploit improper validation of POST request parameters, potentially leading to denial of service or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29872 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29872.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM T devices (versions \u003c V3.0) allows unauthenticated attackers to exploit improper validation of GET and POST request parameters, leading to potential denial of service or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29873 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29873.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to capture unencrypted HTTP web traffic, potentially disrupting device functionality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29874 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29874.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit reflected XSS attacks due to improper handling of GET request parameters reflected in the web server response.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit unencrypted challenge-response communication, potentially gaining access to the device\u0027s management interface.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29878 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29878.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated users to access critical device information due to inadequate access protection in the web-based management interface.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29879 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29879.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows authenticated attackers to exploit improper input validation in the configuration interface, enabling persistent XSS attacks affecting logged-in users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29880 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29880.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "other",
"text": "Missing Authentication for Critical Function",
"title": "CWE-306"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated users to access internal configuration details due to inadequate access protection in the web-based management interface.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29881 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29881.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A vulnerability in SICAM T (versions \u003c V3.0) allows unauthenticated attackers to exploit improper file handling for XSS attacks, potentially enabling actions on behalf of legitimate users via error logs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29882 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29882.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Vulnerabilities in SICAM P850, P855, and T devices (all versions \u003c V3.00) allow unauthenticated access to web interface pages, enabling attackers to delete log files without authentication.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-29883 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-29883.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-29883"
},
{
"cve": "CVE-2022-30594",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "Recent kernel updates for SUSE Linux Enterprise and various Linux Kernel versions addressed multiple security vulnerabilities, including the RETBLEED attack, use-after-free issues, buffer overflows, and restriction bypasses related to the PT_SUSPEND_SECCOMP flag.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-30594 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-30594.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-30594"
},
{
"cve": "CVE-2022-31807",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "Vulnerabilities in SiPass integrated AC5102 and ACC-AP devices allow local and remote attackers to upload or modify firmware due to inadequate integrity checks during firmware updates.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-31807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-31807.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-31807"
},
{
"cve": "CVE-2022-34903",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "GnuPGP has multiple vulnerabilities, including signature forgery and status injection issues, while recent updates to gpg2 and Docker images for Dagster-cloud and Spectrafit address these security concerns.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-34903 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-34903.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-34903"
},
{
"cve": "CVE-2022-36123",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "other",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "description",
"text": "The Linux kernel prior to version 5.18.13 contains a vulnerability in the block starting symbol (.bss) that may allow Xen PV guest OS users to perform denial of service attacks or escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-36123 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-36123.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-36123"
},
{
"cve": "CVE-2022-37032",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "Recent updates for Quagga and FRRouting address multiple vulnerabilities, including sensitive information disclosure and denial of service risks due to BGP processing issues and out-of-bounds read vulnerabilities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-37032 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37032.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-37032"
},
{
"cve": "CVE-2022-37434",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Recent updates to VLC, Oracle products, zlib, and Dagster-cloud address various vulnerabilities, including critical issues in Oracle systems and security fixes in zlib and opencv-python.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-37434 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-37434.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-37434"
},
{
"cve": "CVE-2022-40226",
"cwe": {
"id": "CWE-384",
"name": "Session Fixation"
},
"notes": [
{
"category": "other",
"text": "Session Fixation",
"title": "CWE-384"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850, P855, and T devices allows session takeover due to the acceptance of user-defined session cookies without renewal after login/logout.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-40226 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-40226.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-40226"
},
{
"cve": "CVE-2022-41665",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Parameter/Argument Delimiters",
"title": "CWE-141"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850, P855 (all versions \u003c V3.10) and SICAM T (all versions \u003c V3.0) devices allows unauthenticated attackers to execute arbitrary code or cause denial of service due to improper GET request parameter validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-41665 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-41665.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-41665"
},
{
"cve": "CVE-2022-41858",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels addressed critical security vulnerabilities, including stack overflows, denial of service, memory leaks, and use-after-free issues, enhancing overall system stability and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-41858 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-41858.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-41858"
},
{
"cve": "CVE-2022-43439",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in POWER METER models SICAM Q100, P850, P855, and T allows authenticated remote attackers to crash the device or execute arbitrary code due to improper validation of the Language-parameter in web interface requests.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-43439 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-43439.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-43439"
},
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "Red Hat OpenShift and multiple NetApp products have vulnerabilities in components like \u0027less\u0027, allowing local attackers to execute arbitrary commands, manipulate files, or disclose sensitive information due to improper handling of shell metacharacters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48624 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48624.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48624"
},
{
"cve": "CVE-2022-48626",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5, 15 SP2, SP3, SP4, and SP5 were updated to address multiple security vulnerabilities, including use-after-free issues, memory leaks, and kernel panics.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48626 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48626.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48626"
},
{
"cve": "CVE-2022-48919",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "other",
"text": "Double Free",
"title": "CWE-415"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including memory leaks, null pointer dereferences, and race conditions, with numerous CVEs resolved.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48919 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48919.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48919"
},
{
"cve": "CVE-2022-48926",
"cwe": {
"id": "CWE-414",
"name": "Missing Lock Check"
},
"notes": [
{
"category": "other",
"text": "Missing Lock Check",
"title": "CWE-414"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP3, SP4, and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, race conditions, and null pointer dereferences, along with various non-security bug fixes.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48926 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48926.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48926"
},
{
"cve": "CVE-2022-48948",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP4 and SP5 kernels were updated to address multiple security vulnerabilities, including memory leaks, use-after-free issues, and a buffer overflow in the USB gadget\u0027s setup handler.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48948 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48948.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48948"
},
{
"cve": "CVE-2022-48951",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP4/SP5, including Azure and RT variants, received updates addressing multiple security vulnerabilities such as memory leaks and use-after-free issues, alongside driver-related fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48951 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48951.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48951"
},
{
"cve": "CVE-2022-48960",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels, including 15 SP5, 15 SP4, and 12 SP5, addressed critical security vulnerabilities such as use-after-free and memory leaks in network and display drivers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48960 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48960.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48960"
},
{
"cve": "CVE-2022-48962",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "Multiple updates across various SUSE Linux Enterprise kernels (15 SP5, 15 SP4, 15 SP3, 15 SP2, 12 SP5) addressed critical security vulnerabilities, including use-after-free and memory leak issues in network and display components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48962 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48962.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48962"
},
{
"cve": "CVE-2022-48966",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "SUSE Linux Enterprise 15 SP5 and 12 SP5 kernels received updates addressing multiple security vulnerabilities, including memory leaks, use-after-free issues, and out-of-bounds access across various components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48966 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48966.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48966"
},
{
"cve": "CVE-2022-48967",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across various versions have been updated to address multiple security vulnerabilities, including use-after-free issues and memory leaks in networking and display components.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-48967 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-48967.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-48967"
},
{
"cve": "CVE-2022-49058",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "SUSE Linux Enterprise kernels across versions 12 SP5 and 15 SP3 to SP5 have been updated to address multiple security vulnerabilities, including race conditions, buffer overflows, and memory management issues, alongside various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-49058 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-49058.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2022-49058"
},
{
"cve": "CVE-2023-4641",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"notes": [
{
"category": "other",
"text": "Incorrect Implementation of Authentication Algorithm",
"title": "CWE-303"
},
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "description",
"text": "Recent updates address multiple vulnerabilities across various platforms, including Oracle Communications, Red Hat OpenShift, and shadow-utils, affecting user account management and potentially leading to unauthorized access and data leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-4641 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-4641.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-4641"
},
{
"cve": "CVE-2023-27043",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates for Python 3.11 and earlier versions address multiple security vulnerabilities, particularly in email parsing and libexpat, alongside various non-security improvements and fixes for CVEs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-27043 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-27043.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-27043"
},
{
"cve": "CVE-2023-28322",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"notes": [
{
"category": "other",
"text": "Expected Behavior Violation",
"title": "CWE-440"
},
{
"category": "other",
"text": "Missing Encryption of Sensitive Data",
"title": "CWE-311"
},
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Recent updates for macOS Ventura, Monterey, and Big Sur address multiple security vulnerabilities, while curl updates fix various flaws, including use-after-free and information disclosure issues, alongside a critical vulnerability in Oracle Enterprise Manager.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-28322 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-28322.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-28322"
},
{
"cve": "CVE-2023-29383",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "The shadow update addresses CVE-2023-29383 related to /etc/shadow manipulation, resolves control character injection vulnerabilities in Shadow 4.13, and includes various non-security bug fixes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-29383 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-29383.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-29383"
},
{
"cve": "CVE-2023-29491",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "Recent updates for macOS Ventura, Monterey, and Big Sur address critical vulnerabilities, while Oracle, Red Hat OpenShift, and ncurses have multiple security flaws that could lead to system compromise and denial-of-service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-29491 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-29491.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-29491"
},
{
"cve": "CVE-2023-30901",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"notes": [
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "description",
"text": "SICAM P850 and P855 devices (all versions \u003c V3.11) are vulnerable to Cross-Site Request Forgery attacks, allowing unauthorized actions via malicious links targeting authenticated users.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-30901 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-30901.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-30901"
},
{
"cve": "CVE-2023-31238",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "description",
"text": "A vulnerability in SICAM P850 and P855 devices (all versions \u003c V3.11) allows attackers to impersonate legitimate users by exploiting missing cookie protection flags and accessing session tokens.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-31238 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-31238.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-31238"
},
{
"cve": "CVE-2023-41358",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "The frr and quagga updates address multiple vulnerabilities, including issues with BGP attributes, zero-length NLRIs, and denial of service risks, enhancing overall stability and security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-41358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-41358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-41358"
},
{
"cve": "CVE-2023-46218",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"notes": [
{
"category": "other",
"text": "Insertion of Sensitive Information Into Sent Data",
"title": "CWE-201"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "description",
"text": "Multiple vulnerabilities across Oracle Communications products, curl, and Siemens products allow unauthorized access, data manipulation, and potential Denial-of-Service, with CVSS scores of 6.5 for specific Oracle vulnerabilities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46218 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-46218.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-46218"
},
{
"cve": "CVE-2023-46753",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "The FRRouting 8.5.6 update addresses multiple vulnerabilities, including crashes from crafted BGP UPDATE messages and malformed MP_REACH_NLRI data, while enhancing PIM/PIMv6/BGP and VRF support.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46753 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-46753.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-46753"
},
{
"cve": "CVE-2023-47234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "The frr 8.5.6 update addresses multiple vulnerabilities in BGP UPDATE processing, including denial-of-service issues and crashes from malformed messages and improper attribute handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-47234 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-47234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2023-47234"
},
{
"cve": "CVE-2024-0397",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "Recent updates for Python interpreters and Oracle Database Server address multiple security vulnerabilities, including denial of service risks and memory race conditions, alongside various bug fixes and enhancements.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-0397 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-0397.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-0397"
},
{
"cve": "CVE-2024-5642",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to Python address multiple security vulnerabilities, including buffer overreads and email header injection, affecting versions up to 3.9 and impacting various NetApp products.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-5642 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-5642.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-5642"
},
{
"cve": "CVE-2024-6232",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "Recent updates to various Python versions address multiple vulnerabilities, including denial of service and excessive resource consumption, particularly in the tarfile and http.cookies modules, alongside Oracle Database patches for significant vulnerabilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6232 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-6232.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-6232"
},
{
"cve": "CVE-2024-6923",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "Recent updates for various Python versions, including venv-salt-minion, address multiple security vulnerabilities, particularly email header injection and resource consumption issues, alongside numerous bug fixes and enhancements.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6923 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-6923.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-6923"
},
{
"cve": "CVE-2024-7592",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "Recent updates for Python 3.x and Oracle products address multiple security vulnerabilities, including denial of service, excessive resource consumption, and email header injection, with varying severity levels across different versions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-7592 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-7592.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-7592"
},
{
"cve": "CVE-2024-11053",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "Multiple vulnerabilities in curl and Oracle products, including credential leakage and unauthorized data access, affect various versions of software, notably impacting cURL and Oracle Communications Unified Assurance.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11053 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-11053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-11053"
},
{
"cve": "CVE-2024-11168",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "Recent updates for Python address CVE-2024-11168, fixing improper validation of IPv6 and IPvFuture addresses, and resolving vulnerabilities in the `urllib.parse.urlsplit()` and `urlparse()` functions that could lead to SSRF exploits.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11168 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-11168.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-11168"
},
{
"cve": "CVE-2024-12133",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "Multiple vulnerabilities affecting Oracle Communications EAGLE LNP Application Processor, Oracle Cloud Native Core Policy, and GNU libtasn1 could lead to denial of service attacks, with CVSS scores of 5.3 for some products.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-12133 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12133.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-12133"
},
{
"cve": "CVE-2024-12243",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "A flaw in GnuTLS related to inefficient DER decoding in libtasn1 can lead to denial-of-service conditions, affecting multiple NetApp products and identified as CVE-2024-12243.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-12243 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-12243.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-12243"
},
{
"cve": "CVE-2024-28085",
"cwe": {
"id": "CWE-268",
"name": "Privilege Chaining"
},
"notes": [
{
"category": "other",
"text": "Privilege Chaining",
"title": "CWE-268"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Neutralization of Escape, Meta, or Control Sequences",
"title": "CWE-150"
},
{
"category": "description",
"text": "The util-linux update addresses critical vulnerabilities, particularly in the \u0027wall\u0027 command, neutralizing escape sequences to prevent account takeover and other potential exploits in versions up to 2.40.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28085 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-28085.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-28085"
},
{
"cve": "CVE-2024-32487",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "other",
"text": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)",
"title": "CWE-96"
},
{
"category": "description",
"text": "The Less text file viewer has an OS command execution vulnerability due to mishandled newline characters in file names, affecting multiple NetApp products and allowing remote command execution when the LESSOPEN variable is set.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-32487 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-32487.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-32487"
},
{
"cve": "CVE-2024-47875",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "DOMPurify has addressed a nesting-based mXSS vulnerability in versions 2.5.0 and 3.1.3, while HPE Private Cloud AI has identified remote exploit vulnerabilities.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47875 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-47875.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-47875"
},
{
"cve": "CVE-2024-50602",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "other",
"text": "Improper Check for Unusual or Exceptional Conditions",
"title": "CWE-754"
},
{
"category": "description",
"text": "Multiple vulnerabilities across Oracle Communications Cloud Native Core services and libexpat allow unauthenticated denial of service attacks, with CVSS scores of 5.9, affecting various versions and components.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-50602 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-50602.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-50602"
},
{
"cve": "CVE-2024-52533",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "Recent vulnerabilities in Oracle Communications Cloud Native Core and Gnome Glib versions prior to 2.82.1 expose systems to unauthorized access and buffer overflow risks, potentially leading to data compromise and service disruptions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52533 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-52533.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-52533"
},
{
"cve": "CVE-2024-56835",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II (versions \u003c V2.17.0) allows code injection in the DHCP Server configuration file, enabling attackers to gain root access via a reverse shell.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56835 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56835.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56835"
},
{
"cve": "CVE-2024-56836",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II family versions prior to V2.17.0 allows attackers to inject parameters during Dynamic DNS configuration, potentially leading to root access via a reverse shell.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56836 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56836.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56836"
},
{
"cve": "CVE-2024-56837",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "description",
"text": "A vulnerability in the RUGGEDCOM ROX II family (versions \u003c V2.17.0) allows attackers to gain root access through insufficient validation during configuration file handling.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56837 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56837.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56837"
},
{
"cve": "CVE-2024-56838",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II devices (versions \u003c V2.17.0) allows attackers to execute arbitrary code as root due to the SCEP client\u0027s failure to validate multiple fields during secure certificate enrollment.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56838 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56838.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56838"
},
{
"cve": "CVE-2024-56839",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM ROX II (versions \u003c V2.17.0) allows code injection via VRF, enabling attackers to execute arbitrary code with root privileges.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56839 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56839.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56839"
},
{
"cve": "CVE-2024-56840",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "description",
"text": "A vulnerability in the RUGGEDCOM ROX II family (versions \u003c V2.17.0) allows code injection via IPsec, enabling attackers to execute arbitrary code with root privileges.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56840 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-56840.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2024-56840"
},
{
"cve": "CVE-2025-0938",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Recent updates to Python versions 3.6, 3.11, 3.12, and 3.13.5 address security vulnerabilities related to improper URL parsing of domain names with square brackets, which violate RFC 3986 and could lead to unauthorized data manipulation.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-0938 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-0938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-0938"
},
{
"cve": "CVE-2025-2783",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "Palo Alto Networks has addressed vulnerabilities in Prisma\u00ae Access Browser and highlighted a high-severity sandbox escape flaw in Google Chrome on Windows, linked to an incorrect handle in Mojo.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:L/U:Amber",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-2783 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-2783.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-2783"
},
{
"cve": "CVE-2025-10148",
"cwe": {
"id": "CWE-340",
"name": "Generation of Predictable Numbers or Identifiers"
},
"notes": [
{
"category": "other",
"text": "Generation of Predictable Numbers or Identifiers",
"title": "CWE-340"
},
{
"category": "description",
"text": "Recent updates to curl (version 8.14.1) address critical security vulnerabilities, including cache poisoning risks in WebSocket code and a denial of service flaw in Oracle Communications Unified Inventory Management.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-10148 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-10148.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-10148"
},
{
"cve": "CVE-2025-40800",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in various versions of COMOS, NX, Simcenter 3D, Simcenter Femap, and Solid Edge products allows for potential man-in-the-middle attacks due to the IAM client not validating server certificates for TLS connections.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40800 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40800.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40800"
},
{
"cve": "CVE-2025-40801",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in COMOS, NX, Simcenter, and Tecnomatix products arises from the SALT SDK\u0027s failure to validate server certificates for TLS connections, risking man-in-the-middle attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40801 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40801.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40801"
},
{
"cve": "CVE-2025-40806",
"cwe": {
"id": "CWE-204",
"name": "Observable Response Discrepancy"
},
"notes": [
{
"category": "other",
"text": "Observable Response Discrepancy",
"title": "CWE-204"
},
{
"category": "description",
"text": "A vulnerability in Gridscale X Prepay (versions \u003c V4.2.1) allows unauthenticated remote attackers to perform user enumeration, potentially facilitating brute force attacks on valid users.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40806 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40806.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40806"
},
{
"cve": "CVE-2025-40807",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass by Capture-replay",
"title": "CWE-294"
},
{
"category": "description",
"text": "A vulnerability in Gridscale X Prepay (versions \u003c V4.2.1) allows locked-out users to exploit capture-replay of authentication tokens, enabling them to establish valid sessions.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40807 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40807.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40807"
},
{
"cve": "CVE-2025-40818",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "other",
"text": "Incorrect Permission Assignment for Critical Resource",
"title": "CWE-732"
},
{
"category": "description",
"text": "A vulnerability in SINEMA Remote Connect Server (versions \u003c V3.2 SP4) allows unauthorized access to private SSL/TLS keys, enabling attackers to impersonate the server and conduct man-in-the-middle attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40818 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40818.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40818"
},
{
"cve": "CVE-2025-40819",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "A vulnerability in SINEMA Remote Connect Server (versions \u003c V3.2 SP4) allows unauthorized modification of the system_ticketinfo table, enabling database users to bypass licensing restrictions and modify database values directly.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40819 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40819"
},
{
"cve": "CVE-2025-40820",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Source of a Communication Channel",
"title": "CWE-940"
},
{
"category": "description",
"text": "The document outlines a vulnerability in certain products that lack TCP sequence number validation, enabling unauthenticated remote attackers to disrupt TCP-based services through the injection of spoofed IP packets.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40820 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40820.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40820"
},
{
"cve": "CVE-2025-40830",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "other",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "description",
"text": "A vulnerability in SINEC Security Monitor (versions \u003c V4.10.0) allows lowly privileged authenticated local attackers to read or write any file on the server or sensor due to inadequate authorization checks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40830 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40830.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40830"
},
{
"cve": "CVE-2025-40831",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in SINEC Security Monitor versions prior to V4.10.0 allows lowly privileged authenticated attackers to exploit input validation issues in the date parameter during report generation, potentially causing a denial of service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40831 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40831.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40831"
},
{
"cve": "CVE-2025-40935",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in RUGGEDCOM devices (versions below V5.10.1) allows authenticated remote attackers to exploit improper input validation during TLS certificate uploads, potentially leading to device crashes and Denial of Service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40935 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40935.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40935"
},
{
"cve": "CVE-2025-40938",
"cwe": {
"id": "CWE-798",
"name": "Use of Hard-coded Credentials"
},
"notes": [
{
"category": "other",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) exposes sensitive firmware information, compromising the device\u0027s confidentiality, integrity, and availability.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40938 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40938"
},
{
"cve": "CVE-2025-40939",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) allows an attacker with physical access to exploit an unauthenticated USB port, potentially causing a denial of service by triggering a reboot.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40939 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40939.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40939"
},
{
"cve": "CVE-2025-40940",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (versions \u003c V4.0.1) leads to inconsistent SNMP behavior, potentially allowing unauthorized access to sensitive data and compromising confidentiality.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40940 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40940.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40940"
},
{
"cve": "CVE-2025-40941",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "description",
"text": "A vulnerability in SIMATIC CN 4100 (all versions \u003c V4.0.1) allows affected devices to expose server information in their responses, potentially aiding attackers with network access in targeted attacks.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-40941 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40941.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-40941"
},
{
"cve": "CVE-2025-59392",
"cwe": {
"id": "CWE-288",
"name": "Authentication Bypass Using an Alternate Path or Channel"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
},
{
"category": "description",
"text": "Elspec G5 devices up to version 1.2.2.19 have a vulnerability that allows physical access to reset the Admin password using a USB drive with a specific reset string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-59392 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-59392.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2025-59392"
},
{
"cve": "CVE-2018-1000876",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "The update for binutils version 2.32 addresses multiple security vulnerabilities, including memory access issues and buffer overflows, while also introducing support for new architectures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2018-1000876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2018/cve-2018-1000876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17",
"CSAFPID-18",
"CSAFPID-19",
"CSAFPID-20",
"CSAFPID-21",
"CSAFPID-22",
"CSAFPID-23",
"CSAFPID-24",
"CSAFPID-25",
"CSAFPID-26",
"CSAFPID-27",
"CSAFPID-28",
"CSAFPID-29",
"CSAFPID-30",
"CSAFPID-31",
"CSAFPID-32"
]
}
],
"title": "CVE-2018-1000876"
}
]
}
OPENSUSE-SU-2019:2280-1
Vulnerability from csaf_opensuse - Published: 2019-10-07 14:21 - Updated: 2019-10-07 14:21Summary
Security update for libseccomp
Severity
Moderate
Notes
Title of the patch: Security update for libseccomp
Description of the patch: This update for libseccomp fixes the following issues:
Security issues fixed:
- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)
libseccomp was updated to new upstream release 2.4.1:
- Fix a BPF generation bug where the optimizer mistakenly
identified duplicate BPF code blocks.
libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):
- Update the syscall table for Linux v5.0-rc5
- Added support for the SCMP_ACT_KILL_PROCESS action
- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute
- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension
- Added support for the parisc and parisc64 architectures
- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)
- Return -EDOM on an endian mismatch when adding an architecture to a filter
- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()
- Fix PFC generation when a syscall is prioritized, but no rule exists
- Numerous fixes to the seccomp-bpf filter generation code
- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
- Numerous tests added to the included test suite, coverage now at ~92%
- Update our Travis CI configuration to use Ubuntu 16.04
- Numerous documentation fixes and updates
libseccomp was updated to release 2.3.3:
- Updated the syscall table for Linux v4.15-rc7
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames: openSUSE-2019-2280
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.1 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
10 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1082318 | self |
| https://bugzilla.suse.com/1128828 | self |
| https://bugzilla.suse.com/1142614 | self |
| https://www.suse.com/security/cve/CVE-2019-9893/ | self |
| https://www.suse.com/security/cve/CVE-2019-9893 | external |
| https://bugzilla.suse.com/1128828 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libseccomp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libseccomp fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)\n\nlibseccomp was updated to new upstream release 2.4.1:\n\n- Fix a BPF generation bug where the optimizer mistakenly\n identified duplicate BPF code blocks.\n\nlibseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):\n\n- Update the syscall table for Linux v5.0-rc5\n- Added support for the SCMP_ACT_KILL_PROCESS action\n- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute\n- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension\n- Added support for the parisc and parisc64 architectures\n- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)\n- Return -EDOM on an endian mismatch when adding an architecture to a filter\n- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()\n- Fix PFC generation when a syscall is prioritized, but no rule exists\n- Numerous fixes to the seccomp-bpf filter generation code\n- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3\n- Numerous tests added to the included test suite, coverage now at ~92%\n- Update our Travis CI configuration to use Ubuntu 16.04\n- Numerous documentation fixes and updates\n\nlibseccomp was updated to release 2.3.3:\n\n- Updated the syscall table for Linux v4.15-rc7\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-2280",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2280-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:2280-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T6BTDMAAEMEE2KT356XYSAOY6YPXMQ6B/#T6BTDMAAEMEE2KT356XYSAOY6YPXMQ6B"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:2280-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T6BTDMAAEMEE2KT356XYSAOY6YPXMQ6B/#T6BTDMAAEMEE2KT356XYSAOY6YPXMQ6B"
},
{
"category": "self",
"summary": "SUSE Bug 1082318",
"url": "https://bugzilla.suse.com/1082318"
},
{
"category": "self",
"summary": "SUSE Bug 1128828",
"url": "https://bugzilla.suse.com/1128828"
},
{
"category": "self",
"summary": "SUSE Bug 1142614",
"url": "https://bugzilla.suse.com/1142614"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9893 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9893/"
}
],
"title": "Security update for libseccomp",
"tracking": {
"current_release_date": "2019-10-07T14:21:04Z",
"generator": {
"date": "2019-10-07T14:21:04Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:2280-1",
"initial_release_date": "2019-10-07T14:21:04Z",
"revision_history": [
{
"date": "2019-10-07T14:21:04Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"product": {
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"product_id": "libseccomp-devel-2.4.1-lp150.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"product": {
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"product_id": "libseccomp-tools-2.4.1-lp150.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "libseccomp2-2.4.1-lp150.2.3.1.i586",
"product": {
"name": "libseccomp2-2.4.1-lp150.2.3.1.i586",
"product_id": "libseccomp2-2.4.1-lp150.2.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"product": {
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"product_id": "libseccomp-devel-2.4.1-lp150.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"product": {
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"product_id": "libseccomp-tools-2.4.1-lp150.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"product": {
"name": "libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"product_id": "libseccomp2-2.4.1-lp150.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64",
"product": {
"name": "libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64",
"product_id": "libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.i586"
},
"product_reference": "libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-devel-2.4.1-lp150.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.x86_64"
},
"product_reference": "libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.i586"
},
"product_reference": "libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-tools-2.4.1-lp150.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.x86_64"
},
"product_reference": "libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-2.4.1-lp150.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.i586"
},
"product_reference": "libseccomp2-2.4.1-lp150.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-2.4.1-lp150.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.x86_64"
},
"product_reference": "libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64"
},
"product_reference": "libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-9893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9893"
}
],
"notes": [
{
"category": "general",
"text": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9893",
"url": "https://www.suse.com/security/cve/CVE-2019-9893"
},
{
"category": "external",
"summary": "SUSE Bug 1128828 for CVE-2019-9893",
"url": "https://bugzilla.suse.com/1128828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-devel-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp-tools-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.i586",
"openSUSE Leap 15.0:libseccomp2-2.4.1-lp150.2.3.1.x86_64",
"openSUSE Leap 15.0:libseccomp2-32bit-2.4.1-lp150.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-07T14:21:04Z",
"details": "moderate"
}
],
"title": "CVE-2019-9893"
}
]
}
OPENSUSE-SU-2019:2283-1
Vulnerability from csaf_opensuse - Published: 2019-10-07 14:21 - Updated: 2019-10-07 14:21Summary
Security update for libseccomp
Severity
Moderate
Notes
Title of the patch: Security update for libseccomp
Description of the patch: This update for libseccomp fixes the following issues:
Security issues fixed:
- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)
libseccomp was updated to new upstream release 2.4.1:
- Fix a BPF generation bug where the optimizer mistakenly
identified duplicate BPF code blocks.
libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):
- Update the syscall table for Linux v5.0-rc5
- Added support for the SCMP_ACT_KILL_PROCESS action
- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute
- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension
- Added support for the parisc and parisc64 architectures
- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)
- Return -EDOM on an endian mismatch when adding an architecture to a filter
- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()
- Fix PFC generation when a syscall is prioritized, but no rule exists
- Numerous fixes to the seccomp-bpf filter generation code
- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
- Numerous tests added to the included test suite, coverage now at ~92%
- Update our Travis CI configuration to use Ubuntu 16.04
- Numerous documentation fixes and updates
libseccomp was updated to release 2.3.3:
- Updated the syscall table for Linux v4.15-rc7
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames: openSUSE-2019-2283
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.1 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
10 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1082318 | self |
| https://bugzilla.suse.com/1128828 | self |
| https://bugzilla.suse.com/1142614 | self |
| https://www.suse.com/security/cve/CVE-2019-9893/ | self |
| https://www.suse.com/security/cve/CVE-2019-9893 | external |
| https://bugzilla.suse.com/1128828 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libseccomp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libseccomp fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)\n\nlibseccomp was updated to new upstream release 2.4.1:\n\n- Fix a BPF generation bug where the optimizer mistakenly\n identified duplicate BPF code blocks.\n\nlibseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):\n\n- Update the syscall table for Linux v5.0-rc5\n- Added support for the SCMP_ACT_KILL_PROCESS action\n- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute\n- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension\n- Added support for the parisc and parisc64 architectures\n- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)\n- Return -EDOM on an endian mismatch when adding an architecture to a filter\n- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()\n- Fix PFC generation when a syscall is prioritized, but no rule exists\n- Numerous fixes to the seccomp-bpf filter generation code\n- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3\n- Numerous tests added to the included test suite, coverage now at ~92%\n- Update our Travis CI configuration to use Ubuntu 16.04\n- Numerous documentation fixes and updates\n\nlibseccomp was updated to release 2.3.3:\n\n- Updated the syscall table for Linux v4.15-rc7\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-2283",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2283-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:2283-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NYDRQWJRBUZSB3DBB6RQ3QUB5GBSQN3T/#NYDRQWJRBUZSB3DBB6RQ3QUB5GBSQN3T"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:2283-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NYDRQWJRBUZSB3DBB6RQ3QUB5GBSQN3T/#NYDRQWJRBUZSB3DBB6RQ3QUB5GBSQN3T"
},
{
"category": "self",
"summary": "SUSE Bug 1082318",
"url": "https://bugzilla.suse.com/1082318"
},
{
"category": "self",
"summary": "SUSE Bug 1128828",
"url": "https://bugzilla.suse.com/1128828"
},
{
"category": "self",
"summary": "SUSE Bug 1142614",
"url": "https://bugzilla.suse.com/1142614"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9893 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9893/"
}
],
"title": "Security update for libseccomp",
"tracking": {
"current_release_date": "2019-10-07T14:21:24Z",
"generator": {
"date": "2019-10-07T14:21:24Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:2283-1",
"initial_release_date": "2019-10-07T14:21:24Z",
"revision_history": [
{
"date": "2019-10-07T14:21:24Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"product": {
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"product_id": "libseccomp-devel-2.4.1-lp151.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"product": {
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"product_id": "libseccomp-tools-2.4.1-lp151.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "libseccomp2-2.4.1-lp151.3.3.1.i586",
"product": {
"name": "libseccomp2-2.4.1-lp151.3.3.1.i586",
"product_id": "libseccomp2-2.4.1-lp151.3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"product": {
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"product_id": "libseccomp-devel-2.4.1-lp151.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"product": {
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"product_id": "libseccomp-tools-2.4.1-lp151.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"product": {
"name": "libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"product_id": "libseccomp2-2.4.1-lp151.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64",
"product": {
"name": "libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64",
"product_id": "libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.i586"
},
"product_reference": "libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-devel-2.4.1-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.x86_64"
},
"product_reference": "libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.i586"
},
"product_reference": "libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp-tools-2.4.1-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.x86_64"
},
"product_reference": "libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-2.4.1-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.i586"
},
"product_reference": "libseccomp2-2.4.1-lp151.3.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-2.4.1-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.x86_64"
},
"product_reference": "libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64"
},
"product_reference": "libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-9893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9893"
}
],
"notes": [
{
"category": "general",
"text": "libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9893",
"url": "https://www.suse.com/security/cve/CVE-2019-9893"
},
{
"category": "external",
"summary": "SUSE Bug 1128828 for CVE-2019-9893",
"url": "https://bugzilla.suse.com/1128828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-devel-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp-tools-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.i586",
"openSUSE Leap 15.1:libseccomp2-2.4.1-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:libseccomp2-32bit-2.4.1-lp151.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-10-07T14:21:24Z",
"details": "moderate"
}
],
"title": "CVE-2019-9893"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…