simatic s7-1500 firmware vulnerabilities and exploits

(subscribe to this query)

NA

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's h...

Haxx Curl Fedoraproject Fedora 36 Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

NA

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due t...

Haxx Libcurl 7.88.1 Haxx Libcurl 7.88.0 Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

1 Github repository

NA

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse t...

Haxx Libcurl Fedoraproject Fedora 36 Debian Debian Linux 10.0 Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

4

CVSSv2

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specia...

Python Python Python Python 3.10.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Tus 8.4 Redhat Enterprise Linux Eus 8.4 Redhat Enterprise Linux Server Aus 8.4 Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Enterprise Linux For Ibm Z Systems Eus 8.4 Redhat Enterprise Linux For Ibm Z Systems 8.0 Redhat Enterprise Linux For Power Little Endian Eus 8.4 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4 Redhat Codeready Linux Builder For Ibm Z Systems 8.0 Redhat Codeready Linux Builder For Power Little Endian 8.0 Redhat Codeready Linux Builder 8.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Extra Packages For Enterprise Linux 7.0 Netapp Ontap Select Deploy Administration Utility -Netapp Hci Compute Node Firmware -

4.3

CVSSv2

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case ins...

4.3

CVSSv2

curl 7.61.0 up to and including 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable...

Haxx Curl Oracle Mysql Server Oracle Essbase Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Netapp Cloud Backup -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H700e Firmware -Netapp H700s Firmware -Siemens Sinec Infrastructure Network Services

6.8

CVSSv2

curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...

Haxx Curl Oracle Mysql Server Oracle Essbase Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -

7.5

CVSSv2

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat...

Gnu Glibc 2.33 Gnu Glibc 2.32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp E-series Santricity Os Controller Netapp Solidfire Baseboard Management Controller Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Debian Debian Linux 10.0

3 Github repositories

5

CVSSv2

An issue exists in GNOME GLib prior to 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevanc...

Gnome Glib Debian Debian Linux 9.0 Fedoraproject Fedora 33 Broadcom Brocade Fabric Operating System Firmware -

5

CVSSv2

An issue exists in GNOME GLib prior to 2.66.7 and 2.67.x prior to 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.

Gnome Glib Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Active Iq Unified Manager -Netapp E-series Performance Analyzer -Broadcom Brocade Fabric Operating System Firmware -

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook