{
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.",
      },
      {
         lang: "es",
         value: "La validación de entrada defectuosa en el núcleo de Apache permite que generadores de contenido/backend maliciosos o explotables dividan las respuestas HTTP. Este problema afecta al servidor HTTP Apache: hasta 2.4.58.",
      },
   ],
   id: "CVE-2023-38709",
   lastModified: "2024-11-21T08:14:05.917",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "LOW",
               baseScore: 7.3,
               baseSeverity: "HIGH",
               confidentialityImpact: "LOW",
               integrityImpact: "LOW",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.4,
            source: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            type: "Secondary",
         },
      ],
   },
   published: "2024-04-04T20:15:08.047",
   references: [
      {
         source: "security@apache.org",
         url: "http://seclists.org/fulldisclosure/2024/Jul/18",
      },
      {
         source: "security@apache.org",
         url: "http://www.openwall.com/lists/oss-security/2024/04/04/3",
      },
      {
         source: "security@apache.org",
         url: "https://httpd.apache.org/security/vulnerabilities_24.html",
      },
      {
         source: "security@apache.org",
         url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
      },
      {
         source: "security@apache.org",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
      },
      {
         source: "security@apache.org",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
      },
      {
         source: "security@apache.org",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
      },
      {
         source: "security@apache.org",
         url: "https://security.netapp.com/advisory/ntap-20240415-0013/",
      },
      {
         source: "security@apache.org",
         url: "https://support.apple.com/kb/HT214119",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://seclists.org/fulldisclosure/2024/Jul/18",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.openwall.com/lists/oss-security/2024/04/04/3",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://httpd.apache.org/security/vulnerabilities_24.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://security.netapp.com/advisory/ntap-20240415-0013/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://support.apple.com/kb/HT214119",
      },
   ],
   sourceIdentifier: "security@apache.org",
   vulnStatus: "Awaiting Analysis",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-1284",
            },
         ],
         source: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
         type: "Secondary",
      },
   ],
}

{
   document: {
      acknowledgments: [
         {
            organization: "Siemens ProductCERT",
            summary: "reporting these vulnerabilities to CISA.",
         },
      ],
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Disclosure is not limited",
         tlp: {
            label: "WHITE",
            url: "https://us-cert.cisa.gov/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities.\n\nSiemens has released a new version for SINEC NMS and recommends to update to the latest version.",
            title: "Summary",
         },
         {
            category: "general",
            text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
            title: "General Recommendations",
         },
         {
            category: "general",
            text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
            title: "Terms of Use",
         },
         {
            category: "legal_disclaimer",
            text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
            title: "Legal Notice",
         },
         {
            category: "other",
            text: "This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.",
            title: "Advisory Conversion Disclaimer",
         },
         {
            category: "other",
            text: "Multiple",
            title: "Critical infrastructure sectors",
         },
         {
            category: "other",
            text: "Worldwide",
            title: "Countries/areas deployed",
         },
         {
            category: "other",
            text: "Germany",
            title: "Company headquarters location",
         },
         {
            category: "general",
            text: "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
            title: "Recommended Practices",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "central@cisa.dhs.gov",
         name: "CISA",
         namespace: "https://www.cisa.gov/",
      },
      references: [
         {
            category: "self",
            summary: "SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 - CSAF Version",
            url: "https://cert-portal.siemens.com/productcert/csaf/ssa-331112.json",
         },
         {
            category: "self",
            summary: "SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 - HTML Version",
            url: "https://cert-portal.siemens.com/productcert/html/ssa-331112.html",
         },
         {
            category: "self",
            summary: "ICS Advisory ICSA-24-319-04 JSON",
            url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-319-04.json",
         },
         {
            category: "self",
            summary: "ICS Advisory ICSA-24-319-04 - Web Version",
            url: "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/topics/industrial-control-systems",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B",
         },
      ],
      title: "Siemens SINEC NMS",
      tracking: {
         current_release_date: "2024-11-12T00:00:00.000000Z",
         generator: {
            engine: {
               name: "CISA CSAF Generator",
               version: "1.0.0",
            },
         },
         id: "ICSA-24-319-04",
         initial_release_date: "2024-11-12T00:00:00.000000Z",
         revision_history: [
            {
               date: "2024-11-12T00:00:00.000000Z",
               legacy_version: "1.0",
               number: "1",
               summary: "Publication Date",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<V3.0_SP1",
                        product: {
                           name: "SINEC NMS",
                           product_id: "CSAFPID-0001",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "SINEC NMS",
               },
            ],
            category: "vendor",
            name: "Siemens",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-4807",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impact summary: If in an application that uses the OpenSSL library an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. The POLY1305 MAC algorithm is most frequently used as part of the CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) algorithm. The most common usage of this AEAD cipher is with TLS protocol versions 1.2 and 1.3 and a malicious client can influence whether this AEAD cipher is used by the server. This implies that server applications using OpenSSL can be potentially impacted. However we are currently not aware of any concrete application that would be affected by this issue therefore we consider this a Low severity security issue. As a workaround the AVX512-IFMA instructions support can be disabled at runtime by setting the environment variable OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000 The FIPS provider is not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-4807",
      },
      {
         cve: "CVE-2023-5363",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths.  This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.\r\n\r\nImpact summary: A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes.\r\n\r\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after the key and IV have been established.  Any alterations to the key length, via the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter, within the OSSL_PARAM array will not take effect as intended, potentially causing truncation or overreading of these values.  The following ciphers and cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\r\n\r\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in loss of confidentiality.  For example, when following NIST's SP 800-38D section 8.2.1 guidance for constructing a deterministic IV for AES in GCM mode, truncation of the counter portion could lead to IV reuse.\r\n\r\nBoth truncations and overruns of the key and overruns of the IV will produce incorrect results and could, in some cases, trigger a memory exception.  However, these issues are not currently assessed as security critical.\r\n\r\nChanging the key and/or IV lengths is not considered to be a common operation and the vulnerable API was recently introduced. Furthermore it is likely that application developers will have spotted this problem during testing since decryption would fail unless both peers in the communication were similarly vulnerable. For these reasons we expect the probability of an application being vulnerable to this to be quite low. However if an application is  vulnerable then this issue is considered very serious. For these reasons we have assessed this issue as Moderate severity overall.\r\n\r\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\r\n\r\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because the issue lies outside of the FIPS provider boundary.\r\n\r\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-5363",
      },
      {
         cve: "CVE-2023-5678",
         cwe: {
            id: "CWE-754",
            name: "Improper Check for Unusual or Exceptional Conditions",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-5678",
      },
      {
         cve: "CVE-2023-6129",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: The POLY1305 MAC (message authentication code) implementation\r\ncontains a bug that might corrupt the internal state of applications running\r\non PowerPC CPU based platforms if the CPU provides vector instructions.\r\n\r\nImpact summary: If an attacker can influence whether the POLY1305 MAC\r\nalgorithm is used, the application state might be corrupted with various\r\napplication dependent consequences.\r\n\r\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\r\nPowerPC CPUs restores the contents of vector registers in a different order\r\nthan they are saved. Thus the contents of some of these vector registers\r\nare corrupted when returning to the caller. The vulnerable code is used only\r\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\r\n\r\nThe consequences of this kind of internal application state corruption can\r\nbe various - from no consequences, if the calling application does not\r\ndepend on the contents of non-volatile XMM registers at all, to the worst\r\nconsequences, where the attacker could get complete control of the application\r\nprocess. However unless the compiler uses the vector registers for storing\r\npointers, the most likely consequence, if any, would be an incorrect result\r\nof some application dependent calculations or a crash leading to a denial of\r\nservice.\r\n\r\nThe POLY1305 MAC algorithm is most frequently used as part of the\r\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\r\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\r\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\r\nclient can influence whether this AEAD cipher is used. This implies that\r\nTLS server applications using OpenSSL can be potentially impacted. However\r\nwe are currently not aware of any concrete application that would be affected\r\nby this issue therefore we consider this a Low severity security issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-6129",
      },
      {
         cve: "CVE-2023-6237",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may lead to a Denial of Service. When function EVP_PKEY_public_check() is called on RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is an overly large prime, then this computation would take a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function EVP_PKEY_public_check() is not called from other OpenSSL functions however it is called from the OpenSSL pkey command line application. For that reason that application is also vulnerable if used with the '-pubin' and '-check' options on untrusted data. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-6237",
      },
      {
         cve: "CVE-2023-38709",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         notes: [
            {
               category: "summary",
               text: "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-38709",
      },
      {
         cve: "CVE-2023-46218",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46218",
      },
      {
         cve: "CVE-2023-46219",
         cwe: {
            id: "CWE-311",
            name: "Missing Encryption of Sensitive Data",
         },
         notes: [
            {
               category: "summary",
               text: "When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46219",
      },
      {
         cve: "CVE-2023-46280",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "summary",
               text: "The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46280",
      },
      {
         cve: "CVE-2024-0727",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\r\nto crash leading to a potential Denial of Service attack\r\n\r\nImpact summary: Applications loading files in the PKCS12 format from untrusted\r\nsources might terminate abruptly.\r\n\r\nA file in PKCS12 format can contain certificates and keys and may come from an\r\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\r\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\r\ndereference that results in OpenSSL crashing. If an application processes PKCS12\r\nfiles from an untrusted source using the OpenSSL APIs then that application will\r\nbe vulnerable to this issue.\r\n\r\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\r\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\r\nand PKCS12_newpass().\r\n\r\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\r\nfunction is related to writing data we do not consider it security significant.\r\n\r\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-0727",
      },
      {
         cve: "CVE-2024-2004",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been explicitly disabled.      curl --proto -all,-http http://curl.se  The flaw is only present if the set of selected protocols disables the entire set of available protocols, in itself a command with no practical use and therefore unlikely to be encountered in real situations. The curl security team has thus assessed this to be low severity bug.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2004",
      },
      {
         cve: "CVE-2024-2379",
         cwe: {
            id: "CWE-295",
            name: "Improper Certificate Validation",
         },
         notes: [
            {
               category: "summary",
               text: "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2379",
      },
      {
         cve: "CVE-2024-2398",
         cwe: {
            id: "CWE-772",
            name: "Missing Release of Resource after Effective Lifetime",
         },
         notes: [
            {
               category: "summary",
               text: "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2398",
      },
      {
         cve: "CVE-2024-2466",
         cwe: {
            id: "CWE-297",
            name: "Improper Validation of Certificate with Host Mismatch",
         },
         notes: [
            {
               category: "summary",
               text: "libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS.  libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2466",
      },
      {
         cve: "CVE-2024-24795",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         notes: [
            {
               category: "summary",
               text: "HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-24795",
      },
      {
         cve: "CVE-2024-27316",
         cwe: {
            id: "CWE-770",
            name: "Allocation of Resources Without Limits or Throttling",
         },
         notes: [
            {
               category: "summary",
               text: "HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-27316",
      },
      {
         cve: "CVE-2024-47808",
         cwe: {
            id: "CWE-732",
            name: "Incorrect Permission Assignment for Critical Resource",
         },
         notes: [
            {
               category: "summary",
               text: "The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system.\r\nThis could allow an authenticated medium-privileged attacker to write arbitrary content to any location in the filesystem of the host system.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.4,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-47808",
      },
   ],
}

{
   document: {
      acknowledgments: [
         {
            organization: "Siemens ProductCERT",
            summary: "reporting these vulnerabilities to CISA.",
         },
      ],
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Disclosure is not limited",
         tlp: {
            label: "WHITE",
            url: "https://us-cert.cisa.gov/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities.\n\nSiemens has released a new version for SINEC NMS and recommends to update to the latest version.",
            title: "Summary",
         },
         {
            category: "general",
            text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
            title: "General Recommendations",
         },
         {
            category: "general",
            text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
            title: "Terms of Use",
         },
         {
            category: "legal_disclaimer",
            text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
            title: "Legal Notice",
         },
         {
            category: "other",
            text: "This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.",
            title: "Advisory Conversion Disclaimer",
         },
         {
            category: "other",
            text: "Multiple",
            title: "Critical infrastructure sectors",
         },
         {
            category: "other",
            text: "Worldwide",
            title: "Countries/areas deployed",
         },
         {
            category: "other",
            text: "Germany",
            title: "Company headquarters location",
         },
         {
            category: "general",
            text: "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
            title: "Recommended Practices",
         },
         {
            category: "general",
            text: "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
            title: "Recommended Practices",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "central@cisa.dhs.gov",
         name: "CISA",
         namespace: "https://www.cisa.gov/",
      },
      references: [
         {
            category: "self",
            summary: "SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 - CSAF Version",
            url: "https://cert-portal.siemens.com/productcert/csaf/ssa-331112.json",
         },
         {
            category: "self",
            summary: "SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 - HTML Version",
            url: "https://cert-portal.siemens.com/productcert/html/ssa-331112.html",
         },
         {
            category: "self",
            summary: "ICS Advisory ICSA-24-319-04 JSON",
            url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-319-04.json",
         },
         {
            category: "self",
            summary: "ICS Advisory ICSA-24-319-04 - Web Version",
            url: "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/topics/industrial-control-systems",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf",
         },
         {
            category: "external",
            summary: "Recommended Practices",
            url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B",
         },
      ],
      title: "Siemens SINEC NMS",
      tracking: {
         current_release_date: "2024-11-12T00:00:00.000000Z",
         generator: {
            engine: {
               name: "CISA CSAF Generator",
               version: "1.0.0",
            },
         },
         id: "ICSA-24-319-04",
         initial_release_date: "2024-11-12T00:00:00.000000Z",
         revision_history: [
            {
               date: "2024-11-12T00:00:00.000000Z",
               legacy_version: "1.0",
               number: "1",
               summary: "Publication Date",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<V3.0_SP1",
                        product: {
                           name: "SINEC NMS",
                           product_id: "CSAFPID-0001",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "SINEC NMS",
               },
            ],
            category: "vendor",
            name: "Siemens",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-4807",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impact summary: If in an application that uses the OpenSSL library an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. The POLY1305 MAC algorithm is most frequently used as part of the CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) algorithm. The most common usage of this AEAD cipher is with TLS protocol versions 1.2 and 1.3 and a malicious client can influence whether this AEAD cipher is used by the server. This implies that server applications using OpenSSL can be potentially impacted. However we are currently not aware of any concrete application that would be affected by this issue therefore we consider this a Low severity security issue. As a workaround the AVX512-IFMA instructions support can be disabled at runtime by setting the environment variable OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000 The FIPS provider is not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-4807",
      },
      {
         cve: "CVE-2023-5363",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths.  This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.\r\n\r\nImpact summary: A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes.\r\n\r\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after the key and IV have been established.  Any alterations to the key length, via the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter, within the OSSL_PARAM array will not take effect as intended, potentially causing truncation or overreading of these values.  The following ciphers and cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\r\n\r\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in loss of confidentiality.  For example, when following NIST's SP 800-38D section 8.2.1 guidance for constructing a deterministic IV for AES in GCM mode, truncation of the counter portion could lead to IV reuse.\r\n\r\nBoth truncations and overruns of the key and overruns of the IV will produce incorrect results and could, in some cases, trigger a memory exception.  However, these issues are not currently assessed as security critical.\r\n\r\nChanging the key and/or IV lengths is not considered to be a common operation and the vulnerable API was recently introduced. Furthermore it is likely that application developers will have spotted this problem during testing since decryption would fail unless both peers in the communication were similarly vulnerable. For these reasons we expect the probability of an application being vulnerable to this to be quite low. However if an application is  vulnerable then this issue is considered very serious. For these reasons we have assessed this issue as Moderate severity overall.\r\n\r\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\r\n\r\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because the issue lies outside of the FIPS provider boundary.\r\n\r\nOpenSSL 3.1 and 3.0 are vulnerable to this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-5363",
      },
      {
         cve: "CVE-2023-5678",
         cwe: {
            id: "CWE-754",
            name: "Improper Check for Unusual or Exceptional Conditions",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-5678",
      },
      {
         cve: "CVE-2023-6129",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: The POLY1305 MAC (message authentication code) implementation\r\ncontains a bug that might corrupt the internal state of applications running\r\non PowerPC CPU based platforms if the CPU provides vector instructions.\r\n\r\nImpact summary: If an attacker can influence whether the POLY1305 MAC\r\nalgorithm is used, the application state might be corrupted with various\r\napplication dependent consequences.\r\n\r\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\r\nPowerPC CPUs restores the contents of vector registers in a different order\r\nthan they are saved. Thus the contents of some of these vector registers\r\nare corrupted when returning to the caller. The vulnerable code is used only\r\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\r\n\r\nThe consequences of this kind of internal application state corruption can\r\nbe various - from no consequences, if the calling application does not\r\ndepend on the contents of non-volatile XMM registers at all, to the worst\r\nconsequences, where the attacker could get complete control of the application\r\nprocess. However unless the compiler uses the vector registers for storing\r\npointers, the most likely consequence, if any, would be an incorrect result\r\nof some application dependent calculations or a crash leading to a denial of\r\nservice.\r\n\r\nThe POLY1305 MAC algorithm is most frequently used as part of the\r\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\r\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\r\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\r\nclient can influence whether this AEAD cipher is used. This implies that\r\nTLS server applications using OpenSSL can be potentially impacted. However\r\nwe are currently not aware of any concrete application that would be affected\r\nby this issue therefore we consider this a Low severity security issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-6129",
      },
      {
         cve: "CVE-2023-6237",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may lead to a Denial of Service. When function EVP_PKEY_public_check() is called on RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is an overly large prime, then this computation would take a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function EVP_PKEY_public_check() is not called from other OpenSSL functions however it is called from the OpenSSL pkey command line application. For that reason that application is also vulnerable if used with the '-pubin' and '-check' options on untrusted data. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-6237",
      },
      {
         cve: "CVE-2023-38709",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         notes: [
            {
               category: "summary",
               text: "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-38709",
      },
      {
         cve: "CVE-2023-46218",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46218",
      },
      {
         cve: "CVE-2023-46219",
         cwe: {
            id: "CWE-311",
            name: "Missing Encryption of Sensitive Data",
         },
         notes: [
            {
               category: "summary",
               text: "When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46219",
      },
      {
         cve: "CVE-2023-46280",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         notes: [
            {
               category: "summary",
               text: "The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2023-46280",
      },
      {
         cve: "CVE-2024-0727",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\r\nto crash leading to a potential Denial of Service attack\r\n\r\nImpact summary: Applications loading files in the PKCS12 format from untrusted\r\nsources might terminate abruptly.\r\n\r\nA file in PKCS12 format can contain certificates and keys and may come from an\r\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\r\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\r\ndereference that results in OpenSSL crashing. If an application processes PKCS12\r\nfiles from an untrusted source using the OpenSSL APIs then that application will\r\nbe vulnerable to this issue.\r\n\r\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\r\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\r\nand PKCS12_newpass().\r\n\r\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\r\nfunction is related to writing data we do not consider it security significant.\r\n\r\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-0727",
      },
      {
         cve: "CVE-2024-2004",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         notes: [
            {
               category: "summary",
               text: "When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been explicitly disabled.      curl --proto -all,-http http://curl.se  The flaw is only present if the set of selected protocols disables the entire set of available protocols, in itself a command with no practical use and therefore unlikely to be encountered in real situations. The curl security team has thus assessed this to be low severity bug.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2004",
      },
      {
         cve: "CVE-2024-2379",
         cwe: {
            id: "CWE-295",
            name: "Improper Certificate Validation",
         },
         notes: [
            {
               category: "summary",
               text: "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2379",
      },
      {
         cve: "CVE-2024-2398",
         cwe: {
            id: "CWE-772",
            name: "Missing Release of Resource after Effective Lifetime",
         },
         notes: [
            {
               category: "summary",
               text: "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2398",
      },
      {
         cve: "CVE-2024-2466",
         cwe: {
            id: "CWE-297",
            name: "Improper Validation of Certificate with Host Mismatch",
         },
         notes: [
            {
               category: "summary",
               text: "libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS.  libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-2466",
      },
      {
         cve: "CVE-2024-24795",
         cwe: {
            id: "CWE-113",
            name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
         },
         notes: [
            {
               category: "summary",
               text: "HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-24795",
      },
      {
         cve: "CVE-2024-27316",
         cwe: {
            id: "CWE-770",
            name: "Allocation of Resources Without Limits or Throttling",
         },
         notes: [
            {
               category: "summary",
               text: "HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-27316",
      },
      {
         cve: "CVE-2024-47808",
         cwe: {
            id: "CWE-732",
            name: "Incorrect Permission Assignment for Critical Resource",
         },
         notes: [
            {
               category: "summary",
               text: "The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system.\r\nThis could allow an authenticated medium-privileged attacker to write arbitrary content to any location in the filesystem of the host system.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-0001",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update to V3.0 SP1 or later version",
               product_ids: [
                  "CSAFPID-0001",
               ],
               url: "https://support.industry.siemens.com/cs/ww/en/view/109974917/",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.4,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-0001",
               ],
            },
         ],
         title: "CVE-2024-47808",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         text: "mittel",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "Apache ist ein Webserver für verschiedene Plattformen.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um Daten zu manipulieren.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Linux\n- Sonstiges\n- UNIX\n- Windows",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2024-0801 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0801.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2024-0801 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0801",
         },
         {
            category: "external",
            summary: "Apache 2.4.59 Changes vom 2024-04-04",
            url: "https://downloads.apache.org/httpd/CHANGES_2.4.59",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7147925 vom 2024-04-10",
            url: "https://www.ibm.com/support/pages/node/7147925",
         },
         {
            category: "external",
            summary: "Ubuntu Security Notice USN-6729-1 vom 2024-04-11",
            url: "https://ubuntu.com/security/notices/USN-6729-1",
         },
         {
            category: "external",
            summary: "Debian Security Advisory DSA-5662 vom 2024-04-16",
            url: "https://lists.debian.org/debian-security-announce/2024/msg00070.html",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7148492 vom 2024-04-17",
            url: "https://www.ibm.com/support/pages/node/7148492",
         },
         {
            category: "external",
            summary: "Fedora Security Advisory FEDORA-2024-C2F6576348 vom 2024-04-18",
            url: "https://bodhi.fedoraproject.org/updates/FEDORA-2024-c2f6576348",
         },
         {
            category: "external",
            summary: "Fedora Security Advisory FEDORA-2024-937BE154D8 vom 2024-04-17",
            url: "https://bodhi.fedoraproject.org/updates/FEDORA-2024-937be154d8",
         },
         {
            category: "external",
            summary: "Ubuntu Security Notice USN-6729-2 vom 2024-04-17",
            url: "https://ubuntu.com/security/notices/USN-6729-2",
         },
         {
            category: "external",
            summary: "Fedora Security Advisory FEDORA-2024-D0DCCD6B96 vom 2024-04-17",
            url: "https://bodhi.fedoraproject.org/updates/FEDORA-2024-d0dccd6b96",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7148975 vom 2024-04-22",
            url: "https://www.ibm.com/support/pages/node/7148975",
         },
         {
            category: "external",
            summary: "Ubuntu Security Notice USN-6729-3 vom 2024-04-29",
            url: "https://ubuntu.com/security/notices/USN-6729-3",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:1627-1 vom 2024-05-13",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018514.html",
         },
         {
            category: "external",
            summary: "Debian Security Advisory DLA-3818 vom 2024-05-25",
            url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html",
         },
         {
            category: "external",
            summary: "F5 Security Advisory K000139764 vom 2024-05-24",
            url: "https://my.f5.com/manage/s/article/K000139764",
         },
         {
            category: "external",
            summary: "Debian Security Advisory DLA-3819 vom 2024-05-25",
            url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00014.html",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:1788-1 vom 2024-05-27",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018605.html",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:1963-1 vom 2024-06-10",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-June/018665.html",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7158641 vom 2024-06-25",
            url: "https://www.ibm.com/support/pages/node/7158641",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7159010 vom 2024-06-27",
            url: "https://www.ibm.com/support/pages/node/7159010",
         },
         {
            category: "external",
            summary: "Amazon Linux Security Advisory ALAS-2024-2532 vom 2024-06-28",
            url: "https://alas.aws.amazon.com/AL2/ALAS-2024-2532.html",
         },
         {
            category: "external",
            summary: "Red Hat Security Advisory RHSA-2024:4197 vom 2024-07-01",
            url: "https://access.redhat.com/errata/RHSA-2024:4197",
         },
         {
            category: "external",
            summary: "Oracle Linux Security Advisory ELSA-2024-4197 vom 2024-07-02",
            url: "https://linux.oracle.com/errata/ELSA-2024-4197.html",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:1868-1 vom 2024-07-31",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-July/019070.html",
         },
         {
            category: "external",
            summary: "Dell Security Advisory DSA-2024-348 vom 2024-08-06",
            url: "https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities",
         },
         {
            category: "external",
            summary: "DELL Security Update for Dell PowerScale OneFS",
            url: "https://www.dell.com/support/kbdoc/en-us/000228207/dsa-2024-346-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",
         },
         {
            category: "external",
            summary: "Red Hat Security Advisory RHSA-2024:6928 vom 2024-09-24",
            url: "https://access.redhat.com/errata/RHSA-2024:6928",
         },
         {
            category: "external",
            summary: "Red Hat Security Advisory RHSA-2024:6927 vom 2024-09-24",
            url: "https://access.redhat.com/errata/RHSA-2024:6927",
         },
         {
            category: "external",
            summary: "Gentoo Linux Security Advisory GLSA-202409-31 vom 2024-09-28",
            url: "https://security.gentoo.org/glsa/202409-31",
         },
         {
            category: "external",
            summary: "Dell Security Advisory DSA-2024-423 vom 2024-10-11",
            url: "https://www.dell.com/support/kbdoc/de-de/000235068/dsa-2024-423-security-update-for-dell-networker-and-networker-management-console-nmc-multiple-component-vulnerabilities",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7173018 vom 2024-10-14",
            url: "https://www.ibm.com/support/pages/node/7173018",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:3853-1 vom 2024-10-31",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GDIAJ27VL2K243BWSBUC7E6Y4HBYRCG7/",
         },
         {
            category: "external",
            summary: "SUSE Security Update SUSE-SU-2024:3861-1 vom 2024-11-01",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZWV2MVSBRL4AIHT5O6LIOEUFMOC3TUBS/",
         },
         {
            category: "external",
            summary: "HCL Security Advisory",
            url: "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115052",
         },
         {
            category: "external",
            summary: "Red Hat Security Advisory RHSA-2024:9306 vom 2024-11-12",
            url: "https://access.redhat.com/errata/RHSA-2024:9306",
         },
         {
            category: "external",
            summary: "XEROX Security Advisory XRX24-017 vom 2024-11-21",
            url: "https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf",
         },
         {
            category: "external",
            summary: "IBM Security Bulletin 7178934 vom 2024-12-14",
            url: "https://www.ibm.com/support/pages/node/7178934",
         },
         {
            category: "external",
            summary: "HPE Security Bulletin vom 2025-01-17",
            url: "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04773en_us&docLocale=en_US",
         },
         {
            category: "external",
            summary: "F5 Security Advisory K000139447 vom 2025-01-18",
            url: "https://my.f5.com/manage/s/article/K000139447",
         },
      ],
      source_lang: "en-US",
      title: "Apache HTTP Server: Mehrere Schwachstellen ermöglichen Manipulation von Daten",
      tracking: {
         current_release_date: "2025-01-19T23:00:00.000+00:00",
         generator: {
            date: "2025-01-20T09:27:50.886+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.10",
            },
         },
         id: "WID-SEC-W-2024-0801",
         initial_release_date: "2024-04-04T22:00:00.000+00:00",
         revision_history: [
            {
               date: "2024-04-04T22:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
            {
               date: "2024-04-08T22:00:00.000+00:00",
               number: "2",
               summary: "Bewertung angepasst",
            },
            {
               date: "2024-04-10T22:00:00.000+00:00",
               number: "3",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2024-04-11T22:00:00.000+00:00",
               number: "4",
               summary: "Neue Updates von Ubuntu aufgenommen",
            },
            {
               date: "2024-04-16T22:00:00.000+00:00",
               number: "5",
               summary: "Neue Updates von Debian aufgenommen",
            },
            {
               date: "2024-04-17T22:00:00.000+00:00",
               number: "6",
               summary: "Neue Updates von IBM, Fedora und Ubuntu aufgenommen",
            },
            {
               date: "2024-04-21T22:00:00.000+00:00",
               number: "7",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2024-04-29T22:00:00.000+00:00",
               number: "8",
               summary: "Neue Updates von Ubuntu aufgenommen",
            },
            {
               date: "2024-05-13T22:00:00.000+00:00",
               number: "9",
               summary: "Neue Updates von SUSE aufgenommen",
            },
            {
               date: "2024-05-26T22:00:00.000+00:00",
               number: "10",
               summary: "Neue Updates von Debian und F5 aufgenommen",
            },
            {
               date: "2024-05-27T22:00:00.000+00:00",
               number: "11",
               summary: "Neue Updates von SUSE aufgenommen",
            },
            {
               date: "2024-06-10T22:00:00.000+00:00",
               number: "12",
               summary: "Neue Updates von SUSE aufgenommen",
            },
            {
               date: "2024-06-24T22:00:00.000+00:00",
               number: "13",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2024-06-27T22:00:00.000+00:00",
               number: "14",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2024-06-30T22:00:00.000+00:00",
               number: "15",
               summary: "Neue Updates von Amazon aufgenommen",
            },
            {
               date: "2024-07-01T22:00:00.000+00:00",
               number: "16",
               summary: "Neue Updates von Oracle Linux aufgenommen",
            },
            {
               date: "2024-07-31T22:00:00.000+00:00",
               number: "17",
               summary: "Neue Updates von SUSE aufgenommen",
            },
            {
               date: "2024-08-05T22:00:00.000+00:00",
               number: "18",
               summary: "Neue Updates von Dell aufgenommen",
            },
            {
               date: "2024-09-01T22:00:00.000+00:00",
               number: "19",
               summary: "Neue Updates von Dell aufgenommen",
            },
            {
               date: "2024-09-24T22:00:00.000+00:00",
               number: "20",
               summary: "Neue Updates von Red Hat aufgenommen",
            },
            {
               date: "2024-09-29T22:00:00.000+00:00",
               number: "21",
               summary: "Neue Updates von Gentoo aufgenommen",
            },
            {
               date: "2024-10-10T22:00:00.000+00:00",
               number: "22",
               summary: "Neue Updates von Dell aufgenommen",
            },
            {
               date: "2024-10-13T22:00:00.000+00:00",
               number: "23",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2024-10-31T23:00:00.000+00:00",
               number: "24",
               summary: "Neue Updates von SUSE aufgenommen",
            },
            {
               date: "2024-11-03T23:00:00.000+00:00",
               number: "25",
               summary: "Neue Updates von HCL aufgenommen",
            },
            {
               date: "2024-11-11T23:00:00.000+00:00",
               number: "26",
               summary: "Neue Updates von Red Hat aufgenommen",
            },
            {
               date: "2024-11-21T23:00:00.000+00:00",
               number: "27",
               summary: "Neue Updates von XEROX aufgenommen",
            },
            {
               date: "2024-12-15T23:00:00.000+00:00",
               number: "28",
               summary: "Neue Updates von IBM aufgenommen",
            },
            {
               date: "2025-01-19T23:00:00.000+00:00",
               number: "29",
               summary: "Neue Updates von HP und F5 aufgenommen",
            },
         ],
         status: "final",
         version: "29",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "Amazon Linux 2",
                  product: {
                     name: "Amazon Linux 2",
                     product_id: "398363",
                     product_identification_helper: {
                        cpe: "cpe:/o:amazon:linux_2:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Amazon",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<2.4.59",
                        product: {
                           name: "Apache HTTP Server <2.4.59",
                           product_id: "T033904",
                        },
                     },
                     {
                        category: "product_version",
                        name: "2.4.59",
                        product: {
                           name: "Apache HTTP Server 2.4.59",
                           product_id: "T033904-fixed",
                           product_identification_helper: {
                              cpe: "cpe:/a:apache:http_server:2.4.59",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "HTTP Server",
               },
            ],
            category: "vendor",
            name: "Apache",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Debian Linux",
                  product: {
                     name: "Debian Linux",
                     product_id: "2951",
                     product_identification_helper: {
                        cpe: "cpe:/o:debian:debian_linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Debian",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Dell NetWorker",
                        product: {
                           name: "Dell NetWorker",
                           product_id: "T024663",
                           product_identification_helper: {
                              cpe: "cpe:/a:dell:networker:-",
                           },
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<19.10.0.5",
                        product: {
                           name: "Dell NetWorker <19.10.0.5",
                           product_id: "T038270",
                        },
                     },
                     {
                        category: "product_version",
                        name: "19.10.0.5",
                        product: {
                           name: "Dell NetWorker 19.10.0.5",
                           product_id: "T038270-fixed",
                           product_identification_helper: {
                              cpe: "cpe:/a:dell:networker:19.10.0.5",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "NetWorker",
               },
               {
                  category: "product_name",
                  name: "Dell PowerScale",
                  product: {
                     name: "Dell PowerScale",
                     product_id: "T034610",
                     product_identification_helper: {
                        cpe: "cpe:/a:dell:powerscale_onefs:onefs",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Dell",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "EMC Avamar",
                  product: {
                     name: "EMC Avamar",
                     product_id: "T014381",
                     product_identification_helper: {
                        cpe: "cpe:/a:emc:avamar:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "EMC",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "17.1.0-17.1.1",
                        product: {
                           name: "F5 BIG-IP 17.1.0-17.1.1",
                           product_id: "T034899",
                           product_identification_helper: {
                              cpe: "cpe:/a:f5:big-ip:17.1.0_-_17.1.1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "16.1.0-16.1.4",
                        product: {
                           name: "F5 BIG-IP 16.1.0-16.1.4",
                           product_id: "T034901",
                           product_identification_helper: {
                              cpe: "cpe:/a:f5:big-ip:16.1.0_-_16.1.4",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "15.1.0-15.1.10",
                        product: {
                           name: "F5 BIG-IP 15.1.0-15.1.10",
                           product_id: "T034902",
                           product_identification_helper: {
                              cpe: "cpe:/a:f5:big-ip:15.1.0_-_15.1.10",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "16.1.0-16.1.5",
                        product: {
                           name: "F5 BIG-IP 16.1.0-16.1.5",
                           product_id: "T037028",
                           product_identification_helper: {
                              cpe: "cpe:/a:f5:big-ip:16.1.0_-_16.1.5",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "17.1.0-17.1.2",
                        product: {
                           name: "F5 BIG-IP 17.1.0-17.1.2",
                           product_id: "T040213",
                           product_identification_helper: {
                              cpe: "cpe:/a:f5:big-ip:17.1.0_-_17.1.2",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "BIG-IP",
               },
            ],
            category: "vendor",
            name: "F5",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Fedora Linux",
                  product: {
                     name: "Fedora Linux",
                     product_id: "74185",
                     product_identification_helper: {
                        cpe: "cpe:/o:fedoraproject:fedora:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Fedora",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Gentoo Linux",
                  product: {
                     name: "Gentoo Linux",
                     product_id: "T012167",
                     product_identification_helper: {
                        cpe: "cpe:/o:gentoo:linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Gentoo",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "8.x",
                        product: {
                           name: "HCL Commerce 8.x",
                           product_id: "T038745",
                           product_identification_helper: {
                              cpe: "cpe:/a:hcltechsw:commerce:8.x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "9.0-9.0.1.21",
                        product: {
                           name: "HCL Commerce 9.0-9.0.1.21",
                           product_id: "T038746",
                           product_identification_helper: {
                              cpe: "cpe:/a:hcltechsw:commerce:9.0_-_9.0.1.21",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "9.1.0-9.1.15",
                        product: {
                           name: "HCL Commerce 9.1.0-9.1.15",
                           product_id: "T038747",
                           product_identification_helper: {
                              cpe: "cpe:/a:hcltechsw:commerce:9.1.0_-_9.1.15",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Commerce",
               },
            ],
            category: "vendor",
            name: "HCL",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<11.31",
                        product: {
                           name: "HPE HP-UX <11.31",
                           product_id: "T040402",
                        },
                     },
                     {
                        category: "product_version",
                        name: "11.31",
                        product: {
                           name: "HPE HP-UX 11.31",
                           product_id: "T040402-fixed",
                           product_identification_helper: {
                              cpe: "cpe:/o:hp:hp-ux:11.31",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "HP-UX",
               },
            ],
            category: "vendor",
            name: "HPE",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "IBM Business Automation Workflow",
                  product: {
                     name: "IBM Business Automation Workflow",
                     product_id: "T019704",
                     product_identification_helper: {
                        cpe: "cpe:/a:ibm:business_automation_workflow:-",
                     },
                  },
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "8.5",
                        product: {
                           name: "IBM HTTP Server 8.5",
                           product_id: "T003676",
                           product_identification_helper: {
                              cpe: "cpe:/a:ibm:http_server:8.5",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "9",
                        product: {
                           name: "IBM HTTP Server 9.0",
                           product_id: "T008162",
                           product_identification_helper: {
                              cpe: "cpe:/a:ibm:http_server:9.0",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "HTTP Server",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "V10",
                        product: {
                           name: "IBM Power Hardware Management Console V10",
                           product_id: "T023373",
                           product_identification_helper: {
                              cpe: "cpe:/a:ibm:hardware_management_console:v10",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Power Hardware Management Console",
               },
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<8.0.0.27",
                        product: {
                           name: "IBM Rational Build Forge <8.0.0.27",
                           product_id: "T038286",
                        },
                     },
                     {
                        category: "product_version",
                        name: "8.0.0.27",
                        product: {
                           name: "IBM Rational Build Forge 8.0.0.27",
                           product_id: "T038286-fixed",
                           product_identification_helper: {
                              cpe: "cpe:/a:ibm:rational_build_forge:8.0.0.27",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Rational Build Forge",
               },
               {
                  category: "product_name",
                  name: "IBM Rational ClearCase",
                  product: {
                     name: "IBM Rational ClearCase",
                     product_id: "T004180",
                     product_identification_helper: {
                        cpe: "cpe:/a:ibm:rational_clearcase:-",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "IBM Rational ClearQuest",
                  product: {
                     name: "IBM Rational ClearQuest",
                     product_id: "5168",
                     product_identification_helper: {
                        cpe: "cpe:/a:ibm:rational_clearquest:-",
                     },
                  },
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "6.3.0.7",
                        product: {
                           name: "IBM Tivoli Monitoring 6.3.0.7",
                           product_id: "342008",
                           product_identification_helper: {
                              cpe: "cpe:/a:ibm:tivoli_monitoring:6.3.0.7",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Tivoli Monitoring",
               },
            ],
            category: "vendor",
            name: "IBM",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Oracle Linux",
                  product: {
                     name: "Oracle Linux",
                     product_id: "T004914",
                     product_identification_helper: {
                        cpe: "cpe:/o:oracle:linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Oracle",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Red Hat Enterprise Linux",
                  product: {
                     name: "Red Hat Enterprise Linux",
                     product_id: "67646",
                     product_identification_helper: {
                        cpe: "cpe:/o:redhat:enterprise_linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "SUSE Linux",
                  product: {
                     name: "SUSE Linux",
                     product_id: "T002207",
                     product_identification_helper: {
                        cpe: "cpe:/o:suse:suse_linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
         {
            branches: [
               {
                  category: "product_name",
                  name: "Ubuntu Linux",
                  product: {
                     name: "Ubuntu Linux",
                     product_id: "T000126",
                     product_identification_helper: {
                        cpe: "cpe:/o:canonical:ubuntu_linux:-",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Ubuntu",
         },
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "v9",
                        product: {
                           name: "Xerox FreeFlow Print Server v9",
                           product_id: "T015632",
                           product_identification_helper: {
                              cpe: "cpe:/a:xerox:freeflow_print_server:v9",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "FreeFlow Print Server",
               },
            ],
            category: "vendor",
            name: "Xerox",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-38709",
         notes: [
            {
               category: "description",
               text: "Es existiert eine Schwachstelle in Apache HTTP Server. Diese ist auf einen Fehler bei der Validierung von Eingaben zurückzuführen. In Folge ist es möglich HTTP Antworten zu splitten. Ein Angreifer kann diese Schwachstelle ausnutzen, um Daten zu manipulieren.",
            },
         ],
         product_status: {
            known_affected: [
               "T038747",
               "67646",
               "T034902",
               "T038746",
               "5168",
               "T034901",
               "T038745",
               "T004914",
               "T038286",
               "T024663",
               "398363",
               "T040213",
               "T033904",
               "342008",
               "T023373",
               "T034899",
               "T034610",
               "T003676",
               "T015632",
               "T037028",
               "T012167",
               "74185",
               "T014381",
               "2951",
               "T002207",
               "T000126",
               "T019704",
               "T038270",
               "T004180",
               "T040402",
               "T008162",
            ],
         },
         release_date: "2024-04-04T22:00:00.000+00:00",
         title: "CVE-2023-38709",
      },
      {
         cve: "CVE-2024-24795",
         notes: [
            {
               category: "description",
               text: "Es gibt eine Schwachstelle im Apache HTTP Server. Es ist möglich, bösartige Response-Header in Backend-Anwendungen zu injizieren. Ein Angreifer kann dies ausnutzen, um einen HTTP-Desynchronisationsangriff durchzuführen.",
            },
         ],
         product_status: {
            known_affected: [
               "T038747",
               "67646",
               "T034902",
               "T038746",
               "5168",
               "T034901",
               "T038745",
               "T004914",
               "T038286",
               "T024663",
               "398363",
               "T040213",
               "T033904",
               "342008",
               "T023373",
               "T034899",
               "T034610",
               "T003676",
               "T015632",
               "T037028",
               "T012167",
               "74185",
               "T014381",
               "2951",
               "T002207",
               "T000126",
               "T019704",
               "T038270",
               "T004180",
               "T040402",
               "T008162",
            ],
         },
         release_date: "2024-04-04T22:00:00.000+00:00",
         title: "CVE-2024-24795",
      },
   ],
}