Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

siemens simatic s7-1500 cpu 1518 firmware vulnerabilities and exploits

(subscribe to this query)
715
VMScore
CVE-2014-5074
Siemens SIMATIC S7-1500 CPU devices with firmware prior to 1.6 allow remote malicious users to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
Siemens Simatic S7-1500 Cpu Firmware 1.5Siemens Simatic S7-1500 Cpu FirmwareSiemens Simatic S7-1500 Cpu Firmware 1.0.1Siemens Simatic S7-1500 Cpu Firmware 1.1.0Siemens Simatic S7-1500 Cpu Firmware 1.1.1Siemens Simatic S7-1500 Cpu Firmware 1.1.2Siemens Simatic S7-1518f-4 Pn\\/dp Cpu -Siemens Simatic S7-1513-1 Pn Cpu -Siemens Simatic S7-1515-2 Pn Cpu -Siemens Simatic S7-1511-1 Pn Cpu -Siemens Simatic S7-1516-3 Pn\\/dp Cpu -Siemens Simatic S7-1518-4 Pn\\/dp Cpu -Siemens Simatic S7-1516f-3 Pn\\/dp Cpu -
NA
CVE-2023-27537
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due t...
Haxx Libcurl 7.88.1Haxx Libcurl 7.88.0Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
445
VMScore
CVE-2021-27219
An issue exists in GNOME GLib prior to 2.66.6 and 2.67.x prior to 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Gnome GlibFedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Broadcom Brocade Fabric Operating System Firmware -
384
VMScore
CVE-2021-22924
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case ins...
Haxx LibcurlFedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerSiemens Sinec Infrastructure Network ServicesSiemens Sinema Remote Connect ServerSiemens Logo\\! Cmr2040 FirmwareSiemens Logo\\! Cmr2020 FirmwareSiemens Ruggedcomrm 1224 Lte FirmwareSiemens Scalance M804pb FirmwareSiemens Scalance M812-1 FirmwareSiemens Scalance M816-1 FirmwareSiemens Scalance M826-2 Firmware
445
VMScore
CVE-2021-27218
An issue exists in GNOME GLib prior to 2.66.7 and 2.67.x prior to 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Gnome GlibFedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Broadcom Brocade Fabric Operating System Firmware -
NA
CVE-2023-27538
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse t...
Haxx LibcurlFedoraproject Fedora 36Debian Debian Linux 10.0Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
383
VMScore
CVE-2021-22897
curl 7.61.0 up to and including 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H700e Firmware -Netapp H700s Firmware -Siemens Sinec Infrastructure Network Services
NA
CVE-2023-27534
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's h...
Haxx CurlFedoraproject Fedora 36Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
606
VMScore
CVE-2021-22901
curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -
445
VMScore
CVE-2021-28153
An issue exists in GNOME GLib prior to 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevanc...
Gnome GlibDebian Debian Linux 9.0Fedoraproject Fedora 33Broadcom Brocade Fabric Operating System Firmware -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook