{"id":"EUVD-2022-2698","enisaUuid":"c9b070a4-4c60-3ee4-a025-787fca3caabd","description":"The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such that the modified data would still pass the MAC integrity check. Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the connection will fail at that point. Many application protocols require data to be sent from the client to the server first. Therefore, in such a case, only an OpenSSL 3.0 server would be impacted when talking to a non-OpenSSL 3.0 client. If both endpoints are OpenSSL 3.0 then the attacker could modify data being sent in both directions. In this case both clients and servers could be affected, regardless of the application protocol. Note that in the absence of an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to complete the handshake when using this ciphersuite. The confidentiality of data is not impacted by this issue, i.e. an attacker cannot decrypt data that has been encrypted using this ciphersuite - they can only modify it. In order for this attack to work both endpoints must legitimately negotiate the RC4-MD5 ciphersuite. This ciphersuite is not compiled by default in OpenSSL 3.0, and is not available within the default provider or the default ciphersuite list. This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this ciphersuite the following must have occurred: 1) OpenSSL must have been compiled with the (non-default) compile time option enable-weak-ssl-ciphers 2) OpenSSL must have had the legacy provider explicitly loaded (either through application code or via configuration) 3) The ciphersuite must have been explicitly added to the ciphersuite list 4) The libssl security level must have been set to 0 (default is 1) 5) A version of SSL/TLS below TLSv1.3 must have been negotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have in common Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:23 PM","dateUpdated":"Oct 14, 2026, 12:43:59 PM","baseScore":null,"references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d7d56a74a96828985db7354a55227a511615f732b\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","aliases":"CVE-2022-1434\nGHSA-638m-m8mh-7gw2\n","assigner":"openssl","epss":1.23,"enisaIdProduct":[{"id":"55f7a706-dd6a-3889-9473-7090e9402332","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"enisaIdVendor":[{"id":"847b08e8-3e66-34ba-bc02-d88f020e15c5","vendor":{"name":"OpenSSL"}}],"enisaIdVulnerability":[{"id":"99a7a1a1-f141-3306-8a1b-44367cc05fcb","vulnerability":{"id":"CVE-2022-1434","description":"The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such that the modified data would still pass the MAC integrity check. Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the connection will fail at that point. Many application protocols require data to be sent from the client to the server first. Therefore, in such a case, only an OpenSSL 3.0 server would be impacted when talking to a non-OpenSSL 3.0 client. If both endpoints are OpenSSL 3.0 then the attacker could modify data being sent in both directions. In this case both clients and servers could be affected, regardless of the application protocol. Note that in the absence of an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to complete the handshake when using this ciphersuite. The confidentiality of data is not impacted by this issue, i.e. an attacker cannot decrypt data that has been encrypted using this ciphersuite - they can only modify it. In order for this attack to work both endpoints must legitimately negotiate the RC4-MD5 ciphersuite. This ciphersuite is not compiled by default in OpenSSL 3.0, and is not available within the default provider or the default ciphersuite list. This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this ciphersuite the following must have occurred: 1) OpenSSL must have been compiled with the (non-default) compile time option enable-weak-ssl-ciphers 2) OpenSSL must have had the legacy provider explicitly loaded (either through application code or via configuration) 3) The ciphersuite must have been explicitly added to the ciphersuite list 4) The libssl security level must have been set to 0 (default is 1) 5) A version of SSL/TLS below TLSv1.3 must have been negotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have in common Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:23 PM","dateUpdated":"Oct 14, 2026, 12:43:59 PM","status":"PUBLISHED","baseScore":0.0,"references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d7d56a74a96828985db7354a55227a511615f732b\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","enisa_id":"EUVD-2022-2698\n","assigner":"openssl","epss":1.23,"dataProcessed":"Nov 9, 2026, 7:13:38 AM","vulnerabilityProduct":[{"id":"6f6f709a-1ba5-3061-9adb-e9aecf69e4bd","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"vulnerabilityVendor":[{"id":"21d957df-9a7c-36e6-a141-e1b233b18a6f","vendor":{"name":"OpenSSL"}}]}},{"id":"f32a2af3-e20a-328f-a099-5663f2c79fca","vulnerability":{"id":"GHSA-638m-m8mh-7gw2","description":"Incorrect MAC key used in the RC4-MD5 ciphersuite","datePublished":"May 4, 2022, 12:00:22 AM","dateUpdated":"Jun 17, 2022, 12:01:47 AM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2022-1434\nhttps://github.com/github/advisory-database/issues/405\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git;a\u003dcommitdiff;h\u003d7d56a74a96828985db7354a55227a511615f732b\nhttps://rustsec.org/advisories/RUSTSEC-2022-0026.html\nhttps://security.netapp.com/advisory/ntap-20220602-0009\nhttps://www.openssl.org/news/secadv/20220503.txt\n","enisa_id":"EUVD-2022-2698\n","aliases":"GHSA-638m-m8mh-7gw2\nCVE-2022-1434\n","epss":0.0,"dataProcessed":"May 3, 2026, 1:51:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"144bf637-45b2-34be-8158-a6bcd8f490e6","advisory":{"id":"SSA-794697","description":"SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nSIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version. \n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"4f2e0c95-7647-339e-8933-0e8193e84456","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}},{"id":"c38e2269-4e1f-3718-85df-58bd4afb0f1e","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}},{"id":"6bcbd71d-8514-39f4-9418-9866c148ebe1","advisory":{"id":"SSA-398330","description":"SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP  \u003e\u003d V3.1.0 and \u003c V3.1.5","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nSIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e\u003d V3.1.0 and \u003c V3.1.5 are no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"43b98283-1f5b-34e3-8118-8b0f655470a2","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"56f1e3bd-fd7f-36ec-81d2-53cd071ce9a8","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"ea996cf7-452b-3d5c-b66e-f51b3835236b","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"f46291f5-4cfd-3d53-9cc9-7886eada1057","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}},{"id":"fecd664a-707c-393a-97e5-ec811f52cfdc","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}}]}},{"id":"72ea3c9c-32bc-3706-b24e-ccb4fcdc5ab2","advisory":{"id":"SUSE-SU-2022:2306-1","description":"Security update for openssl-3","summary":"Security update for openssl-3","datePublished":"Jul 6, 2022, 11:49:35 AM","dateUpdated":"Jul 6, 2022, 11:49:35 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2306-1.json\nhttps://www.suse.com/support/update/announcement/2022/suse-su-20222306-1/\nhttps://lists.suse.com/pipermail/sle-updates/2022-July/023781.html\nhttps://bugzilla.suse.com/1185637\nhttps://bugzilla.suse.com/1199166\nhttps://bugzilla.suse.com/1199167\nhttps://bugzilla.suse.com/1199168\nhttps://bugzilla.suse.com/1199169\nhttps://bugzilla.suse.com/1200550\nhttps://bugzilla.suse.com/1201099\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2068/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0b913012-166f-3f65-9f2e-12c132f57ce2","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"23756919-1e3a-3fe5-921a-7a0acd37cc79","product":{"name":"libopenssl3-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"288b6f34-6328-3972-bbb0-4b72b40e110b","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"300989a8-26d5-3823-84af-172dde17c7e4","product":{"name":"openssl-3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"42e92ec9-32be-3e79-87a2-fe98c00d0f92","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"53d9bf72-abb0-323f-952c-ada46e05fc1b","product":{"name":"openssl-3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"596731fa-fe17-389f-b763-17fa77bc3abe","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5d062801-cfdb-34f5-b4e3-ce1372c0e4d9","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"67bf08a9-c3a4-38d3-980f-87edb6a728c8","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"8d009963-a64d-3c02-89dd-a65813958c2a","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9665af22-c6a7-30ed-97bf-58d7c780c2ac","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"aaa96d0d-7280-3be3-a756-48652fc27c97","product":{"name":"libopenssl-3-devel-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b090b456-04c1-363b-85b4-18e841dc99d8","product":{"name":"openssl-3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c1603e04-cfde-3d88-b016-92d8599baf33","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"ce9566f6-2967-3e0f-8352-9d08a34909ff","product":{"name":"libopenssl3-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"da155790-194e-388a-8309-f527960116e0","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e56bb946-9316-322b-a4f4-c7f7f30b0885","product":{"name":"openssl-3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"eba633f7-2279-388a-be03-c1baf309e062","product":{"name":"libopenssl-3-devel-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"ed202f80-d739-3b37-af8d-8cfa2540ea7e","product":{"name":"openssl-3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f055c464-8098-3f2c-ac82-f2f4dd77ac7f","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f0a1321b-61ce-3f84-82f8-2e452f3cb990","product":{"name":"openssl-3-doc-3.0.1-150400.4.7.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f9ff9fae-1af2-3492-946b-ba499a493335","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","vendor":{"name":"SUSE"}}}]}},{"id":"95e5c28b-4297-3691-a422-2b9ea5c6ea37","advisory":{"id":"WID-SEC-W-2023-1432","description":"Siemens SIMATIC S7: Mehrere Schwachstellen","summary":"Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, physischer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.","datePublished":"Jun 12, 2023, 10:00:00 PM","dateUpdated":"Jun 22, 2023, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1432.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2023-1432\n","aliases":"CVE-2023-26607\nCVE-2023-23559\nCVE-2023-23455\nCVE-2023-23454\nCVE-2023-1095\nCVE-2023-1077\nCVE-2023-1073\nCVE-2023-0590\nCVE-2023-0466\nCVE-2023-0465\nCVE-2023-0464\nCVE-2023-0394\nCVE-2023-0286\nCVE-2023-0215\nCVE-2023-0179\nCVE-2022-47946\nCVE-2022-47929\nCVE-2022-47520\nCVE-2022-47518\nCVE-2022-4662\nCVE-2022-4450\nCVE-2022-4378\nCVE-2022-43750\nCVE-2022-4304\nCVE-2022-42896\nCVE-2022-42895\nCVE-2022-42722\nCVE-2022-42721\nCVE-2022-42720\nCVE-2022-42719\nCVE-2022-42703\nCVE-2022-42432\nCVE-2022-42329\nCVE-2022-42328\nCVE-2022-41850\nCVE-2022-41849\nCVE-2022-41674\nCVE-2022-4139\nCVE-2022-4129\nCVE-2022-41222\nCVE-2022-41218\nCVE-2022-4095\nCVE-2022-40768\nCVE-2022-40307\nCVE-2022-39190\nCVE-2022-39188\nCVE-2022-36946\nCVE-2022-36879\nCVE-2022-3649\nCVE-2022-3646\nCVE-2022-3635\nCVE-2022-3633\nCVE-2022-3629\nCVE-2022-36280\nCVE-2022-3628\nCVE-2022-3625\nCVE-2022-3621\nCVE-2022-36123\nCVE-2022-3606\nCVE-2022-3594\nCVE-2022-3586\nCVE-2022-3565\nCVE-2022-3564\nCVE-2022-3545\nCVE-2022-3534\nCVE-2022-3524\nCVE-2022-3521\nCVE-2022-34918\nCVE-2022-3435\nCVE-2022-3303\nCVE-2022-32296\nCVE-2022-32250\nCVE-2022-3169\nCVE-2022-3115\nCVE-2022-3104\nCVE-2022-3028\nCVE-2022-30065\nCVE-2022-2978\nCVE-2022-2959\nCVE-2022-2905\nCVE-2022-28391\nCVE-2022-2663\nCVE-2022-26373\nCVE-2022-2602\nCVE-2022-2588\nCVE-2022-2586\nCVE-2022-2585\nCVE-2022-2503\nCVE-2022-2327\nCVE-2022-23219\nCVE-2022-23218\nCVE-2022-2274\nCVE-2022-2153\nCVE-2022-21505\nCVE-2022-21233\nCVE-2022-21166\nCVE-2022-21125\nCVE-2022-21123\nCVE-2022-2097\nCVE-2022-2078\nCVE-2022-2068\nCVE-2022-20572\nCVE-2022-20566\nCVE-2022-20422\nCVE-2022-20421\nCVE-2022-1882\nCVE-2022-1852\nCVE-2022-1679\nCVE-2022-1473\nCVE-2022-1462\nCVE-2022-1434\nCVE-2022-1343\nCVE-2022-1292\nCVE-2022-1184\nCVE-2022-1012\nCVE-2022-0171\nCVE-2021-42386\nCVE-2021-42385\nCVE-2021-42384\nCVE-2021-42383\nCVE-2021-42382\nCVE-2021-42381\nCVE-2021-42380\nCVE-2021-42379\nCVE-2021-42378\nCVE-2021-42377\nCVE-2021-42376\nCVE-2021-42375\nCVE-2021-42374\nCVE-2021-42373\nCVE-2021-4037\nCVE-2021-3999\nCVE-2021-3998\nCVE-2021-38604\nCVE-2021-3759\nCVE-2021-35942\nCVE-2021-33655\nCVE-2021-33574\nCVE-2021-3326\nCVE-2021-28831\nCVE-2021-27645\nCVE-2021-20269\nCVE-2020-29562\nCVE-2020-27618\nCVE-2020-1752\nCVE-2020-10029\nCVE-2019-25013\nCVE-2018-13405\nCVE-2016-10228\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0a84d05e-2ad5-33f4-8071-e40d974aa259","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"749d0ae4-893f-311f-a6e2-e2656e077e21","product":{"name":"Siemens SIMATIC S7 1500 TM MFP","vendor":{"name":"Siemens"}}}]}},{"id":"a5bc8227-c998-3c75-aeab-33ce3e14486e","advisory":{"id":"ICSA-23-348-10","description":"Siemens SIMATIC S7-1500","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (\nhttps://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Aug 12, 2025, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-348-10.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"26a4a012-3d20-3531-9ad2-3b1852d9da67","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"761b361e-7ce1-3722-af4f-741f040a3b33","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"8bc56aee-7ecf-3958-bd53-56ecf79ed7a5","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"9f01a9cd-8738-3080-933b-fddb63986d19","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"a67add6a-e816-35b6-bd31-15201d487425","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}}]}},{"id":"b412fd59-7ccf-3bd9-bcb7-437623c70497","advisory":{"id":"openSUSE-SU-2024:12204-1","description":"libopenssl-3-devel-3.0.5-1.1 on GA media","summary":"libopenssl-3-devel-3.0.5-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 8:33:49 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12204-1.json\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\nhttps://www.suse.com/security/cve/CVE-2022-2274/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2097\nCVE-2022-2274\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"09de3509-c075-3abb-9d69-94a57522d4a4","product":{"name":"libopenssl-3-devel-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0b5e5e96-a807-3c55-a0ff-ba4baf8ec1f7","product":{"name":"openssl-3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0c8d372a-c1f8-359d-95a3-e4cd98d74464","product":{"name":"libopenssl3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0cf4fb0f-e01e-3bb1-8c7f-482094868345","product":{"name":"libopenssl3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0fe4f858-8eb3-34b2-bc4a-5a84aba04147","product":{"name":"openssl-3-doc-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"189ef1b1-60b9-34b8-88c3-2346efd14aa9","product":{"name":"libopenssl3-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1b608f70-87d6-3984-9496-74603ee49b02","product":{"name":"libopenssl3-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1ce94917-e6fb-36b4-ada4-3b32a56efe42","product":{"name":"openssl-3-doc-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"27e4c760-1d21-3b1c-8e64-a8f6721d318f","product":{"name":"openssl-3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2bed438f-acc5-364b-91f5-0ba15c19f558","product":{"name":"openssl-3-doc-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2c1dec0e-9d0c-399b-bf6a-71a798d9da74","product":{"name":"openssl-3-doc-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"36237974-448d-3486-9430-9f065b3015db","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3a25264b-8081-311f-862c-f32b8d93571a","product":{"name":"openssl-3-doc-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b804d2c-5f1d-3822-95cc-c9d0ea994690","product":{"name":"openssl-3-doc-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3fb3031d-da4c-3270-acd7-6200ac672268","product":{"name":"libopenssl3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4707fc2e-006c-3b2b-9962-e1de4f7f53cd","product":{"name":"libopenssl3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"480a2756-f27e-3158-bf07-54c11d2f849c","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4cf0c1f1-b2e0-3eb6-a426-1900f4e3c1de","product":{"name":"libopenssl-3-devel-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4e72511d-3b0a-37e1-adb5-2bf784c9aa5f","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5be02499-9a53-3d64-90ac-a78b73e2cfbd","product":{"name":"openssl-3-doc-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5df48f2d-2518-37c3-b47c-e91186f5043f","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5f801af4-a7dd-30b8-a19f-4e766047e571","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"629dd70f-05a0-3e43-a6b6-96d79cbb539e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"64e1d9f1-1a60-3ae7-88e6-904a7224a3f2","product":{"name":"libopenssl3-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7038e021-3fff-31e0-b619-d0e4e374a564","product":{"name":"libopenssl3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"77c6ce2a-fbe6-3161-afb4-831c4f862f1c","product":{"name":"libopenssl-3-devel-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a0bd8c8-55f5-373d-918d-14e3b63f59d1","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"86cedd9f-7b55-3ddd-adf2-64db225c7e51","product":{"name":"openssl-3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8a9b8127-a485-31dc-89af-3c292eb3e805","product":{"name":"openssl-3-doc-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8e45b7f8-6845-3d58-9e1b-2b2846034f52","product":{"name":"openssl-3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"91cc6ba3-5ab4-3400-9233-f228e81ef1c5","product":{"name":"libopenssl-3-devel-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"983ab188-5187-3ff1-b7b0-3187d38d354b","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9953bfc8-3656-3505-89ca-7582107bdc06","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9976c319-e6ab-38c5-9e8f-825331c298bf","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9ce5cdf2-086b-330c-9ecd-f3c255c03f1c","product":{"name":"libopenssl3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a154f7ed-a529-3f9e-9899-fca202f84621","product":{"name":"openssl-3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a888a862-5b07-3c73-91cd-26547eb10dee","product":{"name":"openssl-3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b11246b8-b154-3462-9db5-b97680dbfdbc","product":{"name":"libopenssl3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b57b69df-e672-3e78-857d-e97e9303543b","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"bcd22274-6166-3e34-ae26-06b8a08ad993","product":{"name":"libopenssl3-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"bf6f59df-b4c9-3805-b698-3ade30ed2914","product":{"name":"openssl-3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c8351d12-d067-31a2-ae92-573638bf0bd7","product":{"name":"libopenssl3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ca477f17-84d4-36d2-b8b2-dd7dcbc9492c","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cbd2779a-5b74-3c71-b3d5-79bee834138d","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"da8f3e74-c069-357d-ac11-c0a6410a6866","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e8ef6620-2bb8-3f80-a079-2ec9e0acfa40","product":{"name":"openssl-3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb2d60fb-43b4-3ce2-9c23-de2cb92d8237","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f992f295-d1d1-3da8-af89-867e2ff0b598","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fba91ff1-e71c-3ff9-81a5-20bf04201d0d","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"cdc91bc5-433f-35ff-8a85-2da138c3e061","advisory":{"id":"ICSA-23-166-11","description":"Siemens SIMATIC S7-1500 TM MFP Linux Kernel","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Apr 9, 2024, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-794697.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-794697.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-11.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-166-11\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"b600c87d-3c24-3921-a059-27cfd3e61710","product":{"name":"SIMATIC S7-1500 TM MFP - Linux Kernel","vendor":{"name":"Siemens"}}},{"id":"cf318a86-9d6e-30de-ab8a-11eaaaf2bb45","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}},{"id":"f154dc28-c17b-3e70-a96d-0c641f5884b3","advisory":{"id":"ICSA-23-047-03","description":"Siemens Brownfield Connectivity Client","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-047-03.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-047-03\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"1598a5aa-8011-3971-9dea-011afa483957","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}},{"id":"f3bad8a2-37d5-32b5-8dda-07341492b60a","advisory":{"id":"WID-SEC-W-2022-0071","description":"OpenSSL: Mehrere Schwachstellen","summary":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.","datePublished":"May 3, 2022, 10:00:00 PM","dateUpdated":"Feb 9, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0071.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2022-0071\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"020b6934-f5f0-3d9d-81f2-1c90446291ed","product":{"name":"Gentoo Linux","vendor":{"name":"gentoo"}}},{"id":"027747b0-7844-35fb-a0ec-1b7a252e4878","product":{"name":"18.5.4","vendor":{"name":"Sophos"}}},{"id":"02a1eb96-773b-3560-8d4f-16781d2549ac","product":{"name":"platform","vendor":{"name":"runZero"}}},{"id":"03f91009-4d62-3678-b3e2-5a4cddc68edd","product":{"name":"19.11.0.5","vendor":{"name":"Dell"}}},{"id":"0433ef04-8fb8-34bc-81d3-bd363fbcf8a7","product":{"name":"Networker","vendor":{"name":"Dell"}}},{"id":"04585260-5e9a-3763-bfbc-9d2c7cb80e62","product":{"name":"Junos ","vendor":{"name":"Juniper Networks"}}},{"id":"0931c5a8-f52e-3f16-a578-83d231524110","product":{"name":"11.7","vendor":{"name":"IBM"}}},{"id":"19b2ce4e-01ad-3e0b-951c-4c8b3df2ca00","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}}},{"id":"212424d3-c849-343c-b69b-1e2c9df25fa2","product":{"name":"19.12.0.2","vendor":{"name":"Dell"}}},{"id":"26a39a8c-d8ea-310f-b299-a453e0339e0b","product":{"name":"19.11.0.6","vendor":{"name":"Dell"}}},{"id":"2bd861d0-dc3b-3a01-a8a4-e66842c079b7","product":{"name":"18.2.0","vendor":{"name":"open source"}}},{"id":"2d82c58c-7245-3459-9869-6cec2063af35","product":{"name":"10.0.0.0-10.0.6.1","vendor":{"name":"IBM"}}},{"id":"2fec08a8-7547-3425-b551-5be2263ee61a","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}},{"id":"31f9d759-1836-36c5-9da8-1f47469693ab","product":{"name":"1.1.1o","vendor":{"name":"open source"}}},{"id":"37fd2155-6a8c-303e-9369-0f577e8de630","product":{"name":"2025.4","vendor":{"name":"SolarWinds "}}},{"id":"3d0892bf-ae38-3a6d-8cc7-d94f4a52b351","product":{"name":"IBM Spectrum Protect","vendor":{"name":"IBM"}}},{"id":"3d7e5861-b65b-3ee2-ad01-3465090f77cf","product":{"name":"Node.js","vendor":{"name":"Node.js"}}},{"id":"442a1555-c479-305b-b364-bf874b3d722a","product":{"name":"19.1","vendor":{"name":"Dell"}}},{"id":"4dcc1c14-32ee-3195-bb7c-5ff856416783","product":{"name":"22.3.79.2108","vendor":{"name":"Paessler"}}},{"id":"539b52c7-c611-3136-b66d-8fa2167c380f","product":{"name":"10.0.5-ISS-ISVA-FP000","vendor":{"name":"IBM"}}},{"id":"5f259d90-365e-349f-87f2-5c9321c3de5d","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"643369cf-c3be-3bf0-aa1a-87d119c93e08","product":{"name":"PRTG","vendor":{"name":"Paessler"}}},{"id":"6750554a-6312-3816-9a79-f800a5a457d3","product":{"name":"Dell NetWorker","vendor":{"name":"Dell"}}},{"id":"6b570d30-7273-3c82-aa4c-b0d2781fdb1d","product":{"name":"Evolved","vendor":{"name":"Juniper"}}},{"id":"6eaecd1c-8cda-3e6a-bd5c-485f6aa6b892","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"73628a6c-e73c-3693-a60a-a5cd96d36406","product":{"name":"Amazon Linux 2","vendor":{"name":"Amazon"}}},{"id":"765d93cd-2a29-30c9-84c8-7097bfe313e6","product":{"name":"3.0.3","vendor":{"name":"Red Hat"}}},{"id":"83f30c79-3142-3ded-b310-e0e4b7752ca9","product":{"name":"NetApp ActiveIQ Unified Manager","vendor":{"name":"NetApp"}}},{"id":"8c48e3ee-fa77-3ad4-847a-d69c7b1380b4","product":{"name":"Hitachi Ops Center","vendor":{"name":"Hitachi"}}},{"id":"96cd7761-6306-385b-8590-8d61a2e1723c","product":{"name":"19.13","vendor":{"name":"Dell"}}},{"id":"9985e1f4-5571-37f2-a66e-310bbf42ff82","product":{"name":"Oracle Solaris","vendor":{"name":"Oracle Corporation"}}},{"id":"a30e6e54-a472-34da-a2ca-52d0473d014c","product":{"name":"Debian Linux","vendor":{"name":"Debian"}}},{"id":"a46a95fd-c068-36d0-a4a0-6ced869823df","product":{"name":"1.0.2ze","vendor":{"name":"open source"}}},{"id":"b303f571-fd76-3874-9b29-9c37d0579558","product":{"name":"Firewall","vendor":{"name":"Comodo"}}},{"id":"bd0b2b93-9fa5-3ec7-9d93-a64059f410f0","product":{"name":"Broadcom Fabric OS","vendor":{"name":"Broadcom"}}},{"id":"bdccce3b-e788-356b-895e-d37a8c67d0b2","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"cc41ceb6-0085-3cc1-99e4-fa2a4bdcf5d4","product":{"name":"Nessus","vendor":{"name":"Tenable"}}},{"id":"dcd655a3-7094-33ef-8277-18488d4901c5","product":{"name":"19.14","vendor":{"name":"Dell"}}},{"id":"df775312-51ef-33e4-9018-d48a214c28b7","product":{"name":"8.15.9","vendor":{"name":"Tenable Security"}}},{"id":"e41d8463-93dd-3a41-b16d-fcfd59355614","product":{"name":"Security Verify Access","vendor":{"name":"IBM"}}},{"id":"efb99ab2-f4eb-37ef-8006-a23191acf1f7","product":{"name":"InfoSphere Information Server","vendor":{"name":"IBM"}}},{"id":"f23bff81-fbc4-3acd-9fba-8e979768bdbc","product":{"name":"Red Hat OpenShift","vendor":{"name":"Red Hat"}}},{"id":"f938b8e6-66a0-3efb-be9e-3f290baae1cc","product":{"name":"Tenable Security Nessus Network Monitor","vendor":{"name":"Tenable Security"}}}]}},{"id":"f716d783-ce73-3c44-8f7d-177e4efc8b4b","advisory":{"id":"SSA-953464","description":"SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"1f62ba6e-f00b-3c74-aec6-bff6192582af","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}}]}