{"id":"EUVD-2022-3867","enisaUuid":"0896dcbf-29d6-3537-9678-90bdd5f25b28","description":"The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:25 PM","dateUpdated":"Oct 14, 2026, 12:48:33 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d64c85430f95200b6b51fe9475bd5203f7c19daf1\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://security.gentoo.org/glsa/202210-02\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","aliases":"CVE-2022-1473\nGHSA-g323-fr93-4j3c\n","assigner":"openssl","epss":4.68,"enisaIdProduct":[{"id":"6e36ccd8-4744-3fdd-8271-beac180da0e0","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"enisaIdVendor":[{"id":"42a74cff-0d5f-342d-8e01-f16072dbbff6","vendor":{"name":"OpenSSL"}}],"enisaIdVulnerability":[{"id":"25d5159a-415d-3173-8755-0d385b04dae0","vulnerability":{"id":"GHSA-g323-fr93-4j3c","description":"Resource leakage when decoding certificates and keys","datePublished":"May 4, 2022, 12:00:22 AM","dateUpdated":"Jun 17, 2022, 12:05:28 AM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2022-1473\nhttps://github.com/github/advisory-database/issues/405\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git;a\u003dcommitdiff;h\u003d64c85430f95200b6b51fe9475bd5203f7c19daf1\nhttps://rustsec.org/advisories/RUSTSEC-2022-0025.html\nhttps://security.gentoo.org/glsa/202210-02\nhttps://security.netapp.com/advisory/ntap-20220602-0009\nhttps://www.openssl.org/news/secadv/20220503.txt\n","enisa_id":"EUVD-2022-3867\n","aliases":"GHSA-g323-fr93-4j3c\nCVE-2022-1473\n","epss":0.0,"dataProcessed":"May 3, 2026, 1:51:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"5b797188-0e35-3294-99f3-a2d3d27c1dd3","vulnerability":{"id":"CVE-2022-1473","description":"The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:25 PM","dateUpdated":"Oct 14, 2026, 12:48:33 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d64c85430f95200b6b51fe9475bd5203f7c19daf1\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://security.gentoo.org/glsa/202210-02\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","enisa_id":"EUVD-2022-3867\n","assigner":"openssl","epss":4.68,"dataProcessed":"Nov 3, 2026, 7:14:08 AM","vulnerabilityProduct":[{"id":"429afa0f-155e-3b9c-b1da-0148ee91418d","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"vulnerabilityVendor":[{"id":"b0ae97b0-5dfb-3dc0-897d-e9f8dc4c5ebd","vendor":{"name":"OpenSSL"}}]}}],"enisaIdAdvisory":[{"id":"161a9f37-e1df-38d2-83db-5610517e6afe","advisory":{"id":"ICSA-23-348-10","description":"Siemens SIMATIC S7-1500","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (\nhttps://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Aug 12, 2025, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-348-10.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"26a4a012-3d20-3531-9ad2-3b1852d9da67","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"761b361e-7ce1-3722-af4f-741f040a3b33","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"8bc56aee-7ecf-3958-bd53-56ecf79ed7a5","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"9f01a9cd-8738-3080-933b-fddb63986d19","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"a67add6a-e816-35b6-bd31-15201d487425","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}}]}},{"id":"1bec1e3c-34b9-36d7-87a6-989fe48a27e2","advisory":{"id":"ICSA-23-166-12","description":"Siemens SINAMICS Medium Voltage Products","summary":"SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html).\nSiemens recommends to update the firmware of the integrated SCALANCE S615 device to the latest version. Siemens recommends specific countermeasures for products where the firmware update is not, or not yet applied.\n\nAdditional considerations regarding the specific impact of the vulnerabilities to SINAMICS MV products can be found in the chapter \"Additional Information\".","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Jun 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-942865.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-942865.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-942865.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-942865.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-12.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-166-12\n","aliases":"CVE-2018-25032\nCVE-2021-42374\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0547\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-23308\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-35252\nCVE-2022-36946\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"56a88dec-2fa3-3bf7-839b-f805cbf13f09","product":{"name":"SINAMICS PERFECT HARMONY GH180 6SR5","vendor":{"name":"Siemens"}}},{"id":"b29353c9-e377-3980-8aef-9e94424138a8","product":{"name":"SINAMICS SL150","vendor":{"name":"Siemens"}}}]}},{"id":"2b8e19e6-202d-369d-a15b-98e03ec8e34b","advisory":{"id":"SSA-942865","description":"SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products","summary":"SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html).\nSiemens recommends to update the firmware of the integrated SCALANCE S615 device to the latest version. Siemens recommends specific countermeasures for products where the firmware update is not, or not yet applied.\n\nAdditional considerations regarding the specific impact of the vulnerabilities to SINAMICS MV products can be found in the chapter \"Additional Information\".","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Jun 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-942865.json\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-942865.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-942865.txt\n","aliases":"CVE-2018-25032\nCVE-2021-42374\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0547\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-23308\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-35252\nCVE-2022-36946\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"4265c1a9-e42d-3dd8-806e-5f68868aabb7","product":{"name":"SINAMICS PERFECT HARMONY GH180 6SR5","vendor":{"name":"Siemens"}}}]}},{"id":"2c1cd567-7d3c-32e6-8a37-89254273cc90","advisory":{"id":"openSUSE-SU-2024:12204-1","description":"libopenssl-3-devel-3.0.5-1.1 on GA media","summary":"libopenssl-3-devel-3.0.5-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 8:33:49 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12204-1.json\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\nhttps://www.suse.com/security/cve/CVE-2022-2274/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2097\nCVE-2022-2274\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"09de3509-c075-3abb-9d69-94a57522d4a4","product":{"name":"libopenssl-3-devel-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0b5e5e96-a807-3c55-a0ff-ba4baf8ec1f7","product":{"name":"openssl-3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0c8d372a-c1f8-359d-95a3-e4cd98d74464","product":{"name":"libopenssl3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0cf4fb0f-e01e-3bb1-8c7f-482094868345","product":{"name":"libopenssl3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0fe4f858-8eb3-34b2-bc4a-5a84aba04147","product":{"name":"openssl-3-doc-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"189ef1b1-60b9-34b8-88c3-2346efd14aa9","product":{"name":"libopenssl3-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1b608f70-87d6-3984-9496-74603ee49b02","product":{"name":"libopenssl3-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1ce94917-e6fb-36b4-ada4-3b32a56efe42","product":{"name":"openssl-3-doc-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"27e4c760-1d21-3b1c-8e64-a8f6721d318f","product":{"name":"openssl-3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2bed438f-acc5-364b-91f5-0ba15c19f558","product":{"name":"openssl-3-doc-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2c1dec0e-9d0c-399b-bf6a-71a798d9da74","product":{"name":"openssl-3-doc-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"36237974-448d-3486-9430-9f065b3015db","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3a25264b-8081-311f-862c-f32b8d93571a","product":{"name":"openssl-3-doc-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b804d2c-5f1d-3822-95cc-c9d0ea994690","product":{"name":"openssl-3-doc-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3fb3031d-da4c-3270-acd7-6200ac672268","product":{"name":"libopenssl3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4707fc2e-006c-3b2b-9962-e1de4f7f53cd","product":{"name":"libopenssl3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"480a2756-f27e-3158-bf07-54c11d2f849c","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4cf0c1f1-b2e0-3eb6-a426-1900f4e3c1de","product":{"name":"libopenssl-3-devel-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4e72511d-3b0a-37e1-adb5-2bf784c9aa5f","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5be02499-9a53-3d64-90ac-a78b73e2cfbd","product":{"name":"openssl-3-doc-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5df48f2d-2518-37c3-b47c-e91186f5043f","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5f801af4-a7dd-30b8-a19f-4e766047e571","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"629dd70f-05a0-3e43-a6b6-96d79cbb539e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"64e1d9f1-1a60-3ae7-88e6-904a7224a3f2","product":{"name":"libopenssl3-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7038e021-3fff-31e0-b619-d0e4e374a564","product":{"name":"libopenssl3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"77c6ce2a-fbe6-3161-afb4-831c4f862f1c","product":{"name":"libopenssl-3-devel-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a0bd8c8-55f5-373d-918d-14e3b63f59d1","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"86cedd9f-7b55-3ddd-adf2-64db225c7e51","product":{"name":"openssl-3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8a9b8127-a485-31dc-89af-3c292eb3e805","product":{"name":"openssl-3-doc-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8e45b7f8-6845-3d58-9e1b-2b2846034f52","product":{"name":"openssl-3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"91cc6ba3-5ab4-3400-9233-f228e81ef1c5","product":{"name":"libopenssl-3-devel-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"983ab188-5187-3ff1-b7b0-3187d38d354b","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9953bfc8-3656-3505-89ca-7582107bdc06","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9976c319-e6ab-38c5-9e8f-825331c298bf","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9ce5cdf2-086b-330c-9ecd-f3c255c03f1c","product":{"name":"libopenssl3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a154f7ed-a529-3f9e-9899-fca202f84621","product":{"name":"openssl-3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a888a862-5b07-3c73-91cd-26547eb10dee","product":{"name":"openssl-3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b11246b8-b154-3462-9db5-b97680dbfdbc","product":{"name":"libopenssl3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b57b69df-e672-3e78-857d-e97e9303543b","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"bcd22274-6166-3e34-ae26-06b8a08ad993","product":{"name":"libopenssl3-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"bf6f59df-b4c9-3805-b698-3ade30ed2914","product":{"name":"openssl-3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c8351d12-d067-31a2-ae92-573638bf0bd7","product":{"name":"libopenssl3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ca477f17-84d4-36d2-b8b2-dd7dcbc9492c","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cbd2779a-5b74-3c71-b3d5-79bee834138d","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"da8f3e74-c069-357d-ac11-c0a6410a6866","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e8ef6620-2bb8-3f80-a079-2ec9e0acfa40","product":{"name":"openssl-3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb2d60fb-43b4-3ce2-9c23-de2cb92d8237","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f992f295-d1d1-3da8-af89-867e2ff0b598","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fba91ff1-e71c-3ff9-81a5-20bf04201d0d","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"3930f0a9-8d4e-3d63-8121-868be8ae4dd0","advisory":{"id":"RHSA-2022:6224","description":"Red Hat Security Advisory: openssl security and bug fix update","summary":"An update for openssl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Aug 30, 2022, 4:07:21 PM","dateUpdated":"Oct 14, 2026, 12:44:30 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2022:6224\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6224.json\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"043cb7b1-121a-3a6f-ad85-acc25e29de7d","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"069d37c4-c652-3032-b08d-1ccc550e697e","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"17459a55-5c2b-3777-9a10-e2443aa61f51","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"1e1be9be-0d64-3263-8a21-c389a3bc5da5","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"23e2ec56-c913-3c5f-84f3-e19a45a33bb9","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"25084cee-b75c-3703-a855-cf83a125ff2a","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"2574d9c6-b64f-310f-9987-11fca5deda13","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"27fe4fc0-01cd-354a-aeb6-880165a066d7","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2c1a1308-7147-383c-8bc5-294007445805","product":{"name":"openssl-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"2d1ae3e9-28e5-3fc5-bf8a-7025d2cdb6b4","product":{"name":"openssl-1:3.0.1-41.el9_0.src","vendor":{"name":"Red Hat"}}},{"id":"34a281c2-99d7-3e8f-8709-68f92cf31e1f","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"4174cf67-0204-3356-b63e-2d0bccbcc21b","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"4ae09bd7-efba-362c-8b5c-03614cdf21c9","product":{"name":"openssl-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"538858d6-9aed-3ad3-8c76-12ea3d294822","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"54523642-95a3-303b-886c-319fb273b3c1","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"6fcc7d1f-5cee-3cac-97cb-788901532927","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"74cc1547-0efd-3a20-b4e6-e5161a099a32","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"80224e30-ab63-3cb9-8281-f4a606b05e8c","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8374b13b-6aab-3526-a1f0-feb283c0f8ff","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8bbad7fd-f005-30df-bf74-3afa7af96169","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"8c5d3949-10ba-3e02-8882-bb9c9485f7f9","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"a1da7a6d-39a9-3cb7-ad5c-f8ee659ac2da","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"a9809479-0a29-3de5-8daf-1eee3df20c42","product":{"name":"Red Hat Enterprise Linux BaseOS (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"b88f9f22-db8c-3d01-a311-19e0ea2ab239","product":{"name":"openssl-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ba2f0005-f516-37c4-a100-5b6ec0d44986","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"bcad3339-2f15-3e17-8ce2-1e71de8d2847","product":{"name":"openssl-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"c3a36e2c-5d39-3c4b-9ff1-540c8efc3af7","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"ccc5781f-9c12-306b-8db9-72ef475a4f72","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cdd85849-7ab5-379e-8ac6-8767d7bd83e7","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"d61fbb90-0b58-3f0c-8ab8-4c05cfc0a15d","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"e204bf0e-b17f-301e-bca1-237a53ea4bd3","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"e279aabd-449f-3ac6-b48a-0388bc08f05b","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ed7f4483-8128-3528-8843-7ee8f4f36770","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"f76f3335-cd9b-3d70-96f3-9b2b3c208acd","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"f7cb7f1e-2864-355c-b8f0-d010428cab08","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"fa44c61b-a877-3fba-88a0-fdc958d77839","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"fb4f6bc9-69fc-3462-9923-b7a10fb802f4","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"546c1b8c-f532-3bb0-a817-8131e9e7ba55","advisory":{"id":"SSA-419740","description":"SSA-419740: Multiple\tThird-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2","summary":"Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.","datePublished":"Mar 14, 2023, 12:00:00 AM","dateUpdated":"Mar 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/pdf/ssa-419740.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-419740.txt\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-419740.json\n","aliases":"CVE-2018-25032\nCVE-2019-1125\nCVE-2021-4034\nCVE-2021-4149\nCVE-2021-26401\nCVE-2021-42373\nCVE-2021-42374\nCVE-2021-42375\nCVE-2021-42376\nCVE-2021-42377\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0001\nCVE-2022-0002\nCVE-2022-0494\nCVE-2022-0547\nCVE-2022-1011\nCVE-2022-1016\nCVE-2022-1198\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1353\nCVE-2022-1473\nCVE-2022-1516\nCVE-2022-1652\nCVE-2022-1729\nCVE-2022-1734\nCVE-2022-1974\nCVE-2022-1975\nCVE-2022-2380\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-20158\nCVE-2022-23036\nCVE-2022-23037\nCVE-2022-23038\nCVE-2022-23039\nCVE-2022-23040\nCVE-2022-23041\nCVE-2022-23042\nCVE-2022-23308\nCVE-2022-26490\nCVE-2022-28356\nCVE-2022-28390\nCVE-2022-30065\nCVE-2022-30594\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32296\nCVE-2022-32981\nCVE-2022-33981\nCVE-2022-35252\nCVE-2022-36879\nCVE-2022-36946\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"0045cbd9-2584-3960-a90f-9582af20e79e","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"0a60ea7b-5475-3dbc-8bae-1a1dabf4bce5","product":{"name":"SCALANCE M874-3 (6GK5874-3AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"16622380-a9e6-37d9-a969-c2d83cdedab5","product":{"name":"SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"2dc52ea0-552b-366e-9b03-f508834d4de7","product":{"name":"SCALANCE M804PB (6GK5804-0AP00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"3da81320-392c-35a5-be08-d19e42c13a90","product":{"name":"SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"420d7d14-a199-300f-abaa-7cc840daeb4c","product":{"name":"RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"64e1eb53-8b79-3468-88d9-e4e61f47f977","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"782df6ed-2eb9-3e32-82b0-2593db716c62","product":{"name":"RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"84661218-9c99-3934-9b55-52beb440ad80","product":{"name":"SCALANCE S615 EEC (6GK5615-0AA01-2AA2)","vendor":{"name":"Siemens"}}},{"id":"8505b59b-e149-3f3e-98ba-43bc0f2ece87","product":{"name":"SCALANCE M874-2 (6GK5874-2AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"8bf27b79-c056-3edf-8230-cd37977fc7ba","product":{"name":"SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)","vendor":{"name":"Siemens"}}},{"id":"9831c0ba-6702-3830-9edd-0fab34e7bf54","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"af5f05ed-3784-3d22-8f58-59e3f3a34128","product":{"name":"SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)","vendor":{"name":"Siemens"}}},{"id":"d08eedaf-f724-3a35-b461-b02b49d928df","product":{"name":"SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)","vendor":{"name":"Siemens"}}},{"id":"e91cc70d-5568-31ec-b5f9-c7d53e983388","product":{"name":"SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)","vendor":{"name":"Siemens"}}},{"id":"e9b1a217-3e5c-3356-a17d-f84e6d4f3b86","product":{"name":"SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)","vendor":{"name":"Siemens"}}},{"id":"ecee0b35-1c1b-377b-9b97-40c7e04c19fc","product":{"name":"SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)","vendor":{"name":"Siemens"}}},{"id":"f0749bf5-e2bc-3a07-b46e-754c2812a152","product":{"name":"SCALANCE M876-4 (6GK5876-4AA10-2BA2)","vendor":{"name":"Siemens"}}},{"id":"f24f3cb6-46d8-35e0-a308-bd12ad705da9","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"f26450be-712d-3c52-b794-642124b29f48","product":{"name":"SCALANCE S615 (6GK5615-0AA00-2AA2)","vendor":{"name":"Siemens"}}}]}},{"id":"8ffeebb2-c990-3908-a3c2-459a856e723e","advisory":{"id":"SSA-398330","description":"SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP  \u003e\u003d V3.1.0 and \u003c V3.1.5","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nSIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e\u003d V3.1.0 and \u003c V3.1.5 are no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"43b98283-1f5b-34e3-8118-8b0f655470a2","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"56f1e3bd-fd7f-36ec-81d2-53cd071ce9a8","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"ea996cf7-452b-3d5c-b66e-f51b3835236b","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"f46291f5-4cfd-3d53-9cc9-7886eada1057","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}},{"id":"fecd664a-707c-393a-97e5-ec811f52cfdc","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}}]}},{"id":"94aa167b-5dab-38c0-87ff-d9bfba093920","advisory":{"id":"ICSA-23-075-01","description":"Siemens SCALANCE, RUGGEDCOM Third-Party","summary":"Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.","datePublished":"Mar 14, 2023, 12:00:00 AM","dateUpdated":"Mar 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-419740.json\nhttps://cert-portal.siemens.com/productcert/txt/ssa-419740.txt\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-419740.pdf\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-075-01.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01\n","aliases":"CVE-2018-25032\nCVE-2019-1125\nCVE-2021-4034\nCVE-2021-4149\nCVE-2021-26401\nCVE-2021-42373\nCVE-2021-42374\nCVE-2021-42375\nCVE-2021-42376\nCVE-2021-42377\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0001\nCVE-2022-0002\nCVE-2022-0494\nCVE-2022-0547\nCVE-2022-1011\nCVE-2022-1016\nCVE-2022-1198\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1353\nCVE-2022-1473\nCVE-2022-1516\nCVE-2022-1652\nCVE-2022-1729\nCVE-2022-1734\nCVE-2022-1974\nCVE-2022-1975\nCVE-2022-2380\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-20158\nCVE-2022-23036\nCVE-2022-23037\nCVE-2022-23038\nCVE-2022-23039\nCVE-2022-23040\nCVE-2022-23041\nCVE-2022-23042\nCVE-2022-23308\nCVE-2022-26490\nCVE-2022-28356\nCVE-2022-28390\nCVE-2022-30065\nCVE-2022-30594\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32296\nCVE-2022-32981\nCVE-2022-33981\nCVE-2022-35252\nCVE-2022-36879\nCVE-2022-36946\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"07f2e4d0-2d6f-3317-b602-00fdd61a1229","product":{"name":"SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)","vendor":{"name":"Siemens"}}},{"id":"3120597f-31cb-3ea8-9a3f-e4ba6fce9b02","product":{"name":"SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)","vendor":{"name":"Siemens"}}},{"id":"33c63ad6-4651-3b18-bb70-1671bbc3e291","product":{"name":"SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)","vendor":{"name":"Siemens"}}},{"id":"33d03b10-5aa5-3686-ba25-2b823f24b055","product":{"name":"SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)","vendor":{"name":"Siemens"}}},{"id":"3affc460-b051-37b2-9fcf-c15d96a4cda8","product":{"name":"SCALANCE S615 EEC (6GK5615-0AA01-2AA2)","vendor":{"name":"Siemens"}}},{"id":"5152addf-2008-303f-8214-8a84cf6b3c50","product":{"name":"RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"649d8026-7aaa-31ff-ac7e-0a94cdccd4ff","product":{"name":"SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)","vendor":{"name":"Siemens"}}},{"id":"768e2429-8240-3012-a999-6b0f7bbbf226","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"9581defa-8357-32b7-876e-38c73d8c278b","product":{"name":"SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"a4db036b-6aee-369b-b546-79a03c2212a5","product":{"name":"SCALANCE M876-4 (6GK5876-4AA10-2BA2)","vendor":{"name":"Siemens"}}},{"id":"a97ed73f-a55f-34c9-a127-7275a03f290d","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"acbbc78b-edab-38f3-9b74-2add3a04d721","product":{"name":"SCALANCE M874-2 (6GK5874-2AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"ad0dc503-e887-3a26-94d8-81f05cc2836f","product":{"name":"SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)","vendor":{"name":"Siemens"}}},{"id":"ba737a3d-5b10-3614-be91-230a324dd075","product":{"name":"SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"cdc79a3f-4384-355d-bd41-881051e743c2","product":{"name":"SCALANCE S615 (6GK5615-0AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"d14c5f3b-bf34-3291-9938-6ca50b2aa301","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"dfa8e615-b47a-3723-9e3a-5012253d644e","product":{"name":"SCALANCE M874-3 (6GK5874-3AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"e12882e1-bf98-3738-afe1-3db15895658c","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"e64281e0-2a34-3155-b7a3-64c12a1e92fd","product":{"name":"RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"fb042023-3664-31f5-a4a3-8e8193531bec","product":{"name":"SCALANCE M804PB (6GK5804-0AP00-2AA2)","vendor":{"name":"Siemens"}}}]}},{"id":"a2321219-ab55-39af-9ebf-c54a1e04f048","advisory":{"id":"SSA-794697","description":"SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nSIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version. \n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"4f2e0c95-7647-339e-8933-0e8193e84456","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}},{"id":"c38e2269-4e1f-3718-85df-58bd4afb0f1e","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}},{"id":"b41f01bd-8260-351b-a5af-9c6c4b4db5d1","advisory":{"id":"SSA-953464","description":"SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"1f62ba6e-f00b-3c74-aec6-bff6192582af","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}},{"id":"ba746474-d359-33ce-9874-7d4b60ceb2c3","advisory":{"id":"SUSE-SU-2022:2306-1","description":"Security update for openssl-3","summary":"Security update for openssl-3","datePublished":"Jul 6, 2022, 11:49:35 AM","dateUpdated":"Jul 6, 2022, 11:49:35 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2306-1.json\nhttps://www.suse.com/support/update/announcement/2022/suse-su-20222306-1/\nhttps://lists.suse.com/pipermail/sle-updates/2022-July/023781.html\nhttps://bugzilla.suse.com/1185637\nhttps://bugzilla.suse.com/1199166\nhttps://bugzilla.suse.com/1199167\nhttps://bugzilla.suse.com/1199168\nhttps://bugzilla.suse.com/1199169\nhttps://bugzilla.suse.com/1200550\nhttps://bugzilla.suse.com/1201099\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2068/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0b913012-166f-3f65-9f2e-12c132f57ce2","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"23756919-1e3a-3fe5-921a-7a0acd37cc79","product":{"name":"libopenssl3-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"288b6f34-6328-3972-bbb0-4b72b40e110b","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"300989a8-26d5-3823-84af-172dde17c7e4","product":{"name":"openssl-3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"42e92ec9-32be-3e79-87a2-fe98c00d0f92","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"53d9bf72-abb0-323f-952c-ada46e05fc1b","product":{"name":"openssl-3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"596731fa-fe17-389f-b763-17fa77bc3abe","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5d062801-cfdb-34f5-b4e3-ce1372c0e4d9","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"67bf08a9-c3a4-38d3-980f-87edb6a728c8","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"8d009963-a64d-3c02-89dd-a65813958c2a","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9665af22-c6a7-30ed-97bf-58d7c780c2ac","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"aaa96d0d-7280-3be3-a756-48652fc27c97","product":{"name":"libopenssl-3-devel-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b090b456-04c1-363b-85b4-18e841dc99d8","product":{"name":"openssl-3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c1603e04-cfde-3d88-b016-92d8599baf33","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"ce9566f6-2967-3e0f-8352-9d08a34909ff","product":{"name":"libopenssl3-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"da155790-194e-388a-8309-f527960116e0","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e56bb946-9316-322b-a4f4-c7f7f30b0885","product":{"name":"openssl-3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"eba633f7-2279-388a-be03-c1baf309e062","product":{"name":"libopenssl-3-devel-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"ed202f80-d739-3b37-af8d-8cfa2540ea7e","product":{"name":"openssl-3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f055c464-8098-3f2c-ac82-f2f4dd77ac7f","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f0a1321b-61ce-3f84-82f8-2e452f3cb990","product":{"name":"openssl-3-doc-3.0.1-150400.4.7.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f9ff9fae-1af2-3492-946b-ba499a493335","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","vendor":{"name":"SUSE"}}}]}},{"id":"da494533-1fe3-3198-8acd-a6355a07b9c1","advisory":{"id":"WID-SEC-W-2023-1432","description":"Siemens SIMATIC S7: Mehrere Schwachstellen","summary":"Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, physischer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.","datePublished":"Jun 12, 2023, 10:00:00 PM","dateUpdated":"Jun 22, 2023, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1432.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2023-1432\n","aliases":"CVE-2023-26607\nCVE-2023-23559\nCVE-2023-23455\nCVE-2023-23454\nCVE-2023-1095\nCVE-2023-1077\nCVE-2023-1073\nCVE-2023-0590\nCVE-2023-0466\nCVE-2023-0465\nCVE-2023-0464\nCVE-2023-0394\nCVE-2023-0286\nCVE-2023-0215\nCVE-2023-0179\nCVE-2022-47946\nCVE-2022-47929\nCVE-2022-47520\nCVE-2022-47518\nCVE-2022-4662\nCVE-2022-4450\nCVE-2022-4378\nCVE-2022-43750\nCVE-2022-4304\nCVE-2022-42896\nCVE-2022-42895\nCVE-2022-42722\nCVE-2022-42721\nCVE-2022-42720\nCVE-2022-42719\nCVE-2022-42703\nCVE-2022-42432\nCVE-2022-42329\nCVE-2022-42328\nCVE-2022-41850\nCVE-2022-41849\nCVE-2022-41674\nCVE-2022-4139\nCVE-2022-4129\nCVE-2022-41222\nCVE-2022-41218\nCVE-2022-4095\nCVE-2022-40768\nCVE-2022-40307\nCVE-2022-39190\nCVE-2022-39188\nCVE-2022-36946\nCVE-2022-36879\nCVE-2022-3649\nCVE-2022-3646\nCVE-2022-3635\nCVE-2022-3633\nCVE-2022-3629\nCVE-2022-36280\nCVE-2022-3628\nCVE-2022-3625\nCVE-2022-3621\nCVE-2022-36123\nCVE-2022-3606\nCVE-2022-3594\nCVE-2022-3586\nCVE-2022-3565\nCVE-2022-3564\nCVE-2022-3545\nCVE-2022-3534\nCVE-2022-3524\nCVE-2022-3521\nCVE-2022-34918\nCVE-2022-3435\nCVE-2022-3303\nCVE-2022-32296\nCVE-2022-32250\nCVE-2022-3169\nCVE-2022-3115\nCVE-2022-3104\nCVE-2022-3028\nCVE-2022-30065\nCVE-2022-2978\nCVE-2022-2959\nCVE-2022-2905\nCVE-2022-28391\nCVE-2022-2663\nCVE-2022-26373\nCVE-2022-2602\nCVE-2022-2588\nCVE-2022-2586\nCVE-2022-2585\nCVE-2022-2503\nCVE-2022-2327\nCVE-2022-23219\nCVE-2022-23218\nCVE-2022-2274\nCVE-2022-2153\nCVE-2022-21505\nCVE-2022-21233\nCVE-2022-21166\nCVE-2022-21125\nCVE-2022-21123\nCVE-2022-2097\nCVE-2022-2078\nCVE-2022-2068\nCVE-2022-20572\nCVE-2022-20566\nCVE-2022-20422\nCVE-2022-20421\nCVE-2022-1882\nCVE-2022-1852\nCVE-2022-1679\nCVE-2022-1473\nCVE-2022-1462\nCVE-2022-1434\nCVE-2022-1343\nCVE-2022-1292\nCVE-2022-1184\nCVE-2022-1012\nCVE-2022-0171\nCVE-2021-42386\nCVE-2021-42385\nCVE-2021-42384\nCVE-2021-42383\nCVE-2021-42382\nCVE-2021-42381\nCVE-2021-42380\nCVE-2021-42379\nCVE-2021-42378\nCVE-2021-42377\nCVE-2021-42376\nCVE-2021-42375\nCVE-2021-42374\nCVE-2021-42373\nCVE-2021-4037\nCVE-2021-3999\nCVE-2021-3998\nCVE-2021-38604\nCVE-2021-3759\nCVE-2021-35942\nCVE-2021-33655\nCVE-2021-33574\nCVE-2021-3326\nCVE-2021-28831\nCVE-2021-27645\nCVE-2021-20269\nCVE-2020-29562\nCVE-2020-27618\nCVE-2020-1752\nCVE-2020-10029\nCVE-2019-25013\nCVE-2018-13405\nCVE-2016-10228\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0a84d05e-2ad5-33f4-8071-e40d974aa259","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"749d0ae4-893f-311f-a6e2-e2656e077e21","product":{"name":"Siemens SIMATIC S7 1500 TM MFP","vendor":{"name":"Siemens"}}}]}},{"id":"dbdf29ee-d767-3112-8697-4f7ad25350fe","advisory":{"id":"WID-SEC-W-2022-0071","description":"OpenSSL: Mehrere Schwachstellen","summary":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.","datePublished":"May 3, 2022, 10:00:00 PM","dateUpdated":"Feb 9, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0071.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2022-0071\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"020b6934-f5f0-3d9d-81f2-1c90446291ed","product":{"name":"Gentoo Linux","vendor":{"name":"gentoo"}}},{"id":"027747b0-7844-35fb-a0ec-1b7a252e4878","product":{"name":"18.5.4","vendor":{"name":"Sophos"}}},{"id":"02a1eb96-773b-3560-8d4f-16781d2549ac","product":{"name":"platform","vendor":{"name":"runZero"}}},{"id":"03f91009-4d62-3678-b3e2-5a4cddc68edd","product":{"name":"19.11.0.5","vendor":{"name":"Dell"}}},{"id":"0433ef04-8fb8-34bc-81d3-bd363fbcf8a7","product":{"name":"Networker","vendor":{"name":"Dell"}}},{"id":"04585260-5e9a-3763-bfbc-9d2c7cb80e62","product":{"name":"Junos ","vendor":{"name":"Juniper Networks"}}},{"id":"0931c5a8-f52e-3f16-a578-83d231524110","product":{"name":"11.7","vendor":{"name":"IBM"}}},{"id":"19b2ce4e-01ad-3e0b-951c-4c8b3df2ca00","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}}},{"id":"212424d3-c849-343c-b69b-1e2c9df25fa2","product":{"name":"19.12.0.2","vendor":{"name":"Dell"}}},{"id":"26a39a8c-d8ea-310f-b299-a453e0339e0b","product":{"name":"19.11.0.6","vendor":{"name":"Dell"}}},{"id":"2bd861d0-dc3b-3a01-a8a4-e66842c079b7","product":{"name":"18.2.0","vendor":{"name":"open source"}}},{"id":"2d82c58c-7245-3459-9869-6cec2063af35","product":{"name":"10.0.0.0-10.0.6.1","vendor":{"name":"IBM"}}},{"id":"2fec08a8-7547-3425-b551-5be2263ee61a","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}},{"id":"31f9d759-1836-36c5-9da8-1f47469693ab","product":{"name":"1.1.1o","vendor":{"name":"open source"}}},{"id":"37fd2155-6a8c-303e-9369-0f577e8de630","product":{"name":"2025.4","vendor":{"name":"SolarWinds "}}},{"id":"3d0892bf-ae38-3a6d-8cc7-d94f4a52b351","product":{"name":"IBM Spectrum Protect","vendor":{"name":"IBM"}}},{"id":"3d7e5861-b65b-3ee2-ad01-3465090f77cf","product":{"name":"Node.js","vendor":{"name":"Node.js"}}},{"id":"442a1555-c479-305b-b364-bf874b3d722a","product":{"name":"19.1","vendor":{"name":"Dell"}}},{"id":"4dcc1c14-32ee-3195-bb7c-5ff856416783","product":{"name":"22.3.79.2108","vendor":{"name":"Paessler"}}},{"id":"539b52c7-c611-3136-b66d-8fa2167c380f","product":{"name":"10.0.5-ISS-ISVA-FP000","vendor":{"name":"IBM"}}},{"id":"5f259d90-365e-349f-87f2-5c9321c3de5d","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"643369cf-c3be-3bf0-aa1a-87d119c93e08","product":{"name":"PRTG","vendor":{"name":"Paessler"}}},{"id":"6750554a-6312-3816-9a79-f800a5a457d3","product":{"name":"Dell NetWorker","vendor":{"name":"Dell"}}},{"id":"6b570d30-7273-3c82-aa4c-b0d2781fdb1d","product":{"name":"Evolved","vendor":{"name":"Juniper"}}},{"id":"6eaecd1c-8cda-3e6a-bd5c-485f6aa6b892","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"73628a6c-e73c-3693-a60a-a5cd96d36406","product":{"name":"Amazon Linux 2","vendor":{"name":"Amazon"}}},{"id":"765d93cd-2a29-30c9-84c8-7097bfe313e6","product":{"name":"3.0.3","vendor":{"name":"Red Hat"}}},{"id":"83f30c79-3142-3ded-b310-e0e4b7752ca9","product":{"name":"NetApp ActiveIQ Unified Manager","vendor":{"name":"NetApp"}}},{"id":"8c48e3ee-fa77-3ad4-847a-d69c7b1380b4","product":{"name":"Hitachi Ops Center","vendor":{"name":"Hitachi"}}},{"id":"96cd7761-6306-385b-8590-8d61a2e1723c","product":{"name":"19.13","vendor":{"name":"Dell"}}},{"id":"9985e1f4-5571-37f2-a66e-310bbf42ff82","product":{"name":"Oracle Solaris","vendor":{"name":"Oracle Corporation"}}},{"id":"a30e6e54-a472-34da-a2ca-52d0473d014c","product":{"name":"Debian Linux","vendor":{"name":"Debian"}}},{"id":"a46a95fd-c068-36d0-a4a0-6ced869823df","product":{"name":"1.0.2ze","vendor":{"name":"open source"}}},{"id":"b303f571-fd76-3874-9b29-9c37d0579558","product":{"name":"Firewall","vendor":{"name":"Comodo"}}},{"id":"bd0b2b93-9fa5-3ec7-9d93-a64059f410f0","product":{"name":"Broadcom Fabric OS","vendor":{"name":"Broadcom"}}},{"id":"bdccce3b-e788-356b-895e-d37a8c67d0b2","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"cc41ceb6-0085-3cc1-99e4-fa2a4bdcf5d4","product":{"name":"Nessus","vendor":{"name":"Tenable"}}},{"id":"dcd655a3-7094-33ef-8277-18488d4901c5","product":{"name":"19.14","vendor":{"name":"Dell"}}},{"id":"df775312-51ef-33e4-9018-d48a214c28b7","product":{"name":"8.15.9","vendor":{"name":"Tenable Security"}}},{"id":"e41d8463-93dd-3a41-b16d-fcfd59355614","product":{"name":"Security Verify Access","vendor":{"name":"IBM"}}},{"id":"efb99ab2-f4eb-37ef-8006-a23191acf1f7","product":{"name":"InfoSphere Information Server","vendor":{"name":"IBM"}}},{"id":"f23bff81-fbc4-3acd-9fba-8e979768bdbc","product":{"name":"Red Hat OpenShift","vendor":{"name":"Red Hat"}}},{"id":"f938b8e6-66a0-3efb-be9e-3f290baae1cc","product":{"name":"Tenable Security Nessus Network Monitor","vendor":{"name":"Tenable Security"}}}]}},{"id":"dec22e89-4422-3d5c-bf29-fcfa4edab53c","advisory":{"id":"ICSA-23-047-03","description":"Siemens Brownfield Connectivity Client","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-047-03.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-047-03\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"1598a5aa-8011-3971-9dea-011afa483957","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}},{"id":"f4d8da43-b92c-3f80-8471-0659cfe02ebd","advisory":{"id":"ICSA-23-166-11","description":"Siemens SIMATIC S7-1500 TM MFP Linux Kernel","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Apr 9, 2024, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-794697.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-794697.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-11.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-166-11\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"b600c87d-3c24-3921-a059-27cfd3e61710","product":{"name":"SIMATIC S7-1500 TM MFP - Linux Kernel","vendor":{"name":"Siemens"}}},{"id":"cf318a86-9d6e-30de-ab8a-11eaaaf2bb45","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}}]}