{"id":"EUVD-2022-4552","enisaUuid":"d1566476-5b1c-3374-a6ad-ba0eff5b6b0c","description":"The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL \"ocsp\" application. When verifying an ocsp response with the \"-no_cert_checks\" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:21 PM","dateUpdated":"Oct 14, 2026, 12:43:58 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d2eda98790c5c2741d76d23cc1e74b0dc4f4b391a\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","aliases":"CVE-2022-1343\nGHSA-mfm6-r9g2-q4r7\n","assigner":"openssl","epss":2.16,"enisaIdProduct":[{"id":"56ccc3fd-6bd4-3bb6-b037-93ec9a209263","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"enisaIdVendor":[{"id":"f834f11b-c560-3ce9-ae88-160e858048a0","vendor":{"name":"OpenSSL"}}],"enisaIdVulnerability":[{"id":"08f0c391-3826-3e5e-959c-eb2ff1cae83b","vulnerability":{"id":"CVE-2022-1343","description":"The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL \"ocsp\" application. When verifying an ocsp response with the \"-no_cert_checks\" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).","datePublished":"May 3, 2022, 3:15:21 PM","dateUpdated":"Oct 14, 2026, 12:43:58 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":"https://www.openssl.org/news/secadv/20220503.txt\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git%3Ba\u003dcommitdiff%3Bh\u003d2eda98790c5c2741d76d23cc1e74b0dc4f4b391a\nhttps://security.netapp.com/advisory/ntap-20220602-0009/\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\n","enisa_id":"EUVD-2022-4552\n","assigner":"openssl","epss":2.16,"dataProcessed":"Nov 7, 2026, 7:18:00 AM","vulnerabilityProduct":[{"id":"69f0e65e-b953-377d-899f-4261bb7373ce","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}},"product_version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)"}],"vulnerabilityVendor":[{"id":"c59310b6-690e-3c98-8c2b-c7392d9d6ade","vendor":{"name":"OpenSSL"}}]}},{"id":"8dce26f6-10e1-388e-ab2c-8876fe0cbc43","vulnerability":{"id":"GHSA-mfm6-r9g2-q4r7","description":"`OCSP_basic_verify` may incorrectly verify the response signing certificate","datePublished":"May 4, 2022, 12:00:23 AM","dateUpdated":"Jun 17, 2022, 12:05:49 AM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2022-1343\nhttps://github.com/github/advisory-database/issues/405\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://git.openssl.org/gitweb/?p\u003dopenssl.git;a\u003dcommitdiff;h\u003d2eda98790c5c2741d76d23cc1e74b0dc4f4b391a\nhttps://rustsec.org/advisories/RUSTSEC-2022-0027.html\nhttps://security.netapp.com/advisory/ntap-20220602-0009\nhttps://www.openssl.org/news/secadv/20220503.txt\n","enisa_id":"EUVD-2022-4552\n","aliases":"CVE-2022-1343\nGHSA-mfm6-r9g2-q4r7\n","epss":0.0,"dataProcessed":"May 3, 2026, 1:51:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"0e12141c-1e60-3ee4-99f7-46e4f25d5aef","advisory":{"id":"RHSA-2022:6224","description":"Red Hat Security Advisory: openssl security and bug fix update","summary":"An update for openssl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Aug 30, 2022, 4:07:21 PM","dateUpdated":"Oct 14, 2026, 12:44:30 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2022:6224\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6224.json\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"043cb7b1-121a-3a6f-ad85-acc25e29de7d","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"069d37c4-c652-3032-b08d-1ccc550e697e","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"17459a55-5c2b-3777-9a10-e2443aa61f51","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"1e1be9be-0d64-3263-8a21-c389a3bc5da5","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"23e2ec56-c913-3c5f-84f3-e19a45a33bb9","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"25084cee-b75c-3703-a855-cf83a125ff2a","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"2574d9c6-b64f-310f-9987-11fca5deda13","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"27fe4fc0-01cd-354a-aeb6-880165a066d7","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2c1a1308-7147-383c-8bc5-294007445805","product":{"name":"openssl-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"2d1ae3e9-28e5-3fc5-bf8a-7025d2cdb6b4","product":{"name":"openssl-1:3.0.1-41.el9_0.src","vendor":{"name":"Red Hat"}}},{"id":"34a281c2-99d7-3e8f-8709-68f92cf31e1f","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"4174cf67-0204-3356-b63e-2d0bccbcc21b","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"4ae09bd7-efba-362c-8b5c-03614cdf21c9","product":{"name":"openssl-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"538858d6-9aed-3ad3-8c76-12ea3d294822","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"54523642-95a3-303b-886c-319fb273b3c1","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"6fcc7d1f-5cee-3cac-97cb-788901532927","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"74cc1547-0efd-3a20-b4e6-e5161a099a32","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"80224e30-ab63-3cb9-8281-f4a606b05e8c","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8374b13b-6aab-3526-a1f0-feb283c0f8ff","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8bbad7fd-f005-30df-bf74-3afa7af96169","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"8c5d3949-10ba-3e02-8882-bb9c9485f7f9","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"a1da7a6d-39a9-3cb7-ad5c-f8ee659ac2da","product":{"name":"openssl-devel-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"a9809479-0a29-3de5-8daf-1eee3df20c42","product":{"name":"Red Hat Enterprise Linux BaseOS (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"b88f9f22-db8c-3d01-a311-19e0ea2ab239","product":{"name":"openssl-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ba2f0005-f516-37c4-a100-5b6ec0d44986","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"bcad3339-2f15-3e17-8ce2-1e71de8d2847","product":{"name":"openssl-1:3.0.1-41.el9_0.s390x","vendor":{"name":"Red Hat"}}},{"id":"c3a36e2c-5d39-3c4b-9ff1-540c8efc3af7","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"ccc5781f-9c12-306b-8db9-72ef475a4f72","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cdd85849-7ab5-379e-8ac6-8767d7bd83e7","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"d61fbb90-0b58-3f0c-8ab8-4c05cfc0a15d","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.i686","vendor":{"name":"Red Hat"}}},{"id":"e204bf0e-b17f-301e-bca1-237a53ea4bd3","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"e279aabd-449f-3ac6-b48a-0388bc08f05b","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ed7f4483-8128-3528-8843-7ee8f4f36770","product":{"name":"openssl-libs-debuginfo-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"f76f3335-cd9b-3d70-96f3-9b2b3c208acd","product":{"name":"openssl-debugsource-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"f7cb7f1e-2864-355c-b8f0-d010428cab08","product":{"name":"openssl-libs-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"fa44c61b-a877-3fba-88a0-fdc958d77839","product":{"name":"openssl-perl-1:3.0.1-41.el9_0.aarch64","vendor":{"name":"Red Hat"}}},{"id":"fb4f6bc9-69fc-3462-9923-b7a10fb802f4","product":{"name":"openssl-debuginfo-1:3.0.1-41.el9_0.ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"3752823f-9735-31c5-89fa-e9b566a3c5fa","advisory":{"id":"SSA-953464","description":"SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"1f62ba6e-f00b-3c74-aec6-bff6192582af","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}},{"id":"49b427bf-9460-32cf-b3e6-996662a89918","advisory":{"id":"ICSA-23-166-11","description":"Siemens SIMATIC S7-1500 TM MFP Linux Kernel","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Apr 9, 2024, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-794697.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-794697.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-11.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-166-11\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"b600c87d-3c24-3921-a059-27cfd3e61710","product":{"name":"SIMATIC S7-1500 TM MFP - Linux Kernel","vendor":{"name":"Siemens"}}},{"id":"cf318a86-9d6e-30de-ab8a-11eaaaf2bb45","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}},{"id":"57a8ead4-a3eb-38c7-9ae5-f84452bf8082","advisory":{"id":"SSA-398330","description":"SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP  \u003e\u003d V3.1.0 and \u003c V3.1.5","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nSIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e\u003d V3.1.0 and \u003c V3.1.5 are no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"43b98283-1f5b-34e3-8118-8b0f655470a2","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"56f1e3bd-fd7f-36ec-81d2-53cd071ce9a8","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"ea996cf7-452b-3d5c-b66e-f51b3835236b","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"f46291f5-4cfd-3d53-9cc9-7886eada1057","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}},{"id":"fecd664a-707c-393a-97e5-ec811f52cfdc","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}}]}},{"id":"5b2475fb-8012-3b3a-9339-4ebf36c91a31","advisory":{"id":"ICSA-23-075-01","description":"Siemens SCALANCE, RUGGEDCOM Third-Party","summary":"Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.","datePublished":"Mar 14, 2023, 12:00:00 AM","dateUpdated":"Mar 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-419740.json\nhttps://cert-portal.siemens.com/productcert/txt/ssa-419740.txt\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-419740.pdf\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-075-01.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01\n","aliases":"CVE-2018-25032\nCVE-2019-1125\nCVE-2021-4034\nCVE-2021-4149\nCVE-2021-26401\nCVE-2021-42373\nCVE-2021-42374\nCVE-2021-42375\nCVE-2021-42376\nCVE-2021-42377\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0001\nCVE-2022-0002\nCVE-2022-0494\nCVE-2022-0547\nCVE-2022-1011\nCVE-2022-1016\nCVE-2022-1198\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1353\nCVE-2022-1473\nCVE-2022-1516\nCVE-2022-1652\nCVE-2022-1729\nCVE-2022-1734\nCVE-2022-1974\nCVE-2022-1975\nCVE-2022-2380\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-20158\nCVE-2022-23036\nCVE-2022-23037\nCVE-2022-23038\nCVE-2022-23039\nCVE-2022-23040\nCVE-2022-23041\nCVE-2022-23042\nCVE-2022-23308\nCVE-2022-26490\nCVE-2022-28356\nCVE-2022-28390\nCVE-2022-30065\nCVE-2022-30594\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32296\nCVE-2022-32981\nCVE-2022-33981\nCVE-2022-35252\nCVE-2022-36879\nCVE-2022-36946\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"07f2e4d0-2d6f-3317-b602-00fdd61a1229","product":{"name":"SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)","vendor":{"name":"Siemens"}}},{"id":"3120597f-31cb-3ea8-9a3f-e4ba6fce9b02","product":{"name":"SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)","vendor":{"name":"Siemens"}}},{"id":"33c63ad6-4651-3b18-bb70-1671bbc3e291","product":{"name":"SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)","vendor":{"name":"Siemens"}}},{"id":"33d03b10-5aa5-3686-ba25-2b823f24b055","product":{"name":"SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)","vendor":{"name":"Siemens"}}},{"id":"3affc460-b051-37b2-9fcf-c15d96a4cda8","product":{"name":"SCALANCE S615 EEC (6GK5615-0AA01-2AA2)","vendor":{"name":"Siemens"}}},{"id":"5152addf-2008-303f-8214-8a84cf6b3c50","product":{"name":"RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"649d8026-7aaa-31ff-ac7e-0a94cdccd4ff","product":{"name":"SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)","vendor":{"name":"Siemens"}}},{"id":"768e2429-8240-3012-a999-6b0f7bbbf226","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"9581defa-8357-32b7-876e-38c73d8c278b","product":{"name":"SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"a4db036b-6aee-369b-b546-79a03c2212a5","product":{"name":"SCALANCE M876-4 (6GK5876-4AA10-2BA2)","vendor":{"name":"Siemens"}}},{"id":"a97ed73f-a55f-34c9-a127-7275a03f290d","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"acbbc78b-edab-38f3-9b74-2add3a04d721","product":{"name":"SCALANCE M874-2 (6GK5874-2AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"ad0dc503-e887-3a26-94d8-81f05cc2836f","product":{"name":"SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)","vendor":{"name":"Siemens"}}},{"id":"ba737a3d-5b10-3614-be91-230a324dd075","product":{"name":"SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"cdc79a3f-4384-355d-bd41-881051e743c2","product":{"name":"SCALANCE S615 (6GK5615-0AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"d14c5f3b-bf34-3291-9938-6ca50b2aa301","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"dfa8e615-b47a-3723-9e3a-5012253d644e","product":{"name":"SCALANCE M874-3 (6GK5874-3AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"e12882e1-bf98-3738-afe1-3db15895658c","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"e64281e0-2a34-3155-b7a3-64c12a1e92fd","product":{"name":"RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"fb042023-3664-31f5-a4a3-8e8193531bec","product":{"name":"SCALANCE M804PB (6GK5804-0AP00-2AA2)","vendor":{"name":"Siemens"}}}]}},{"id":"60a1dde7-5992-30f9-adce-6a5fc6d0fd1a","advisory":{"id":"SUSE-SU-2022:2306-1","description":"Security update for openssl-3","summary":"Security update for openssl-3","datePublished":"Jul 6, 2022, 11:49:35 AM","dateUpdated":"Jul 6, 2022, 11:49:35 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2306-1.json\nhttps://www.suse.com/support/update/announcement/2022/suse-su-20222306-1/\nhttps://lists.suse.com/pipermail/sle-updates/2022-July/023781.html\nhttps://bugzilla.suse.com/1185637\nhttps://bugzilla.suse.com/1199166\nhttps://bugzilla.suse.com/1199167\nhttps://bugzilla.suse.com/1199168\nhttps://bugzilla.suse.com/1199169\nhttps://bugzilla.suse.com/1200550\nhttps://bugzilla.suse.com/1201099\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2068/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0b913012-166f-3f65-9f2e-12c132f57ce2","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"23756919-1e3a-3fe5-921a-7a0acd37cc79","product":{"name":"libopenssl3-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"288b6f34-6328-3972-bbb0-4b72b40e110b","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"300989a8-26d5-3823-84af-172dde17c7e4","product":{"name":"openssl-3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"42e92ec9-32be-3e79-87a2-fe98c00d0f92","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"53d9bf72-abb0-323f-952c-ada46e05fc1b","product":{"name":"openssl-3-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"596731fa-fe17-389f-b763-17fa77bc3abe","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5d062801-cfdb-34f5-b4e3-ce1372c0e4d9","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"67bf08a9-c3a4-38d3-980f-87edb6a728c8","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"8d009963-a64d-3c02-89dd-a65813958c2a","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9665af22-c6a7-30ed-97bf-58d7c780c2ac","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"aaa96d0d-7280-3be3-a756-48652fc27c97","product":{"name":"libopenssl-3-devel-32bit-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b090b456-04c1-363b-85b4-18e841dc99d8","product":{"name":"openssl-3-3.0.1-150400.4.7.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c1603e04-cfde-3d88-b016-92d8599baf33","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.i586","vendor":{"name":"SUSE"}}},{"id":"ce9566f6-2967-3e0f-8352-9d08a34909ff","product":{"name":"libopenssl3-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"da155790-194e-388a-8309-f527960116e0","product":{"name":"libopenssl-3-devel-3.0.1-150400.4.7.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e56bb946-9316-322b-a4f4-c7f7f30b0885","product":{"name":"openssl-3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"eba633f7-2279-388a-be03-c1baf309e062","product":{"name":"libopenssl-3-devel-64bit-3.0.1-150400.4.7.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"ed202f80-d739-3b37-af8d-8cfa2540ea7e","product":{"name":"openssl-3-3.0.1-150400.4.7.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f055c464-8098-3f2c-ac82-f2f4dd77ac7f","product":{"name":"libopenssl3-3.0.1-150400.4.7.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f0a1321b-61ce-3f84-82f8-2e452f3cb990","product":{"name":"openssl-3-doc-3.0.1-150400.4.7.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f9ff9fae-1af2-3492-946b-ba499a493335","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP4","vendor":{"name":"SUSE"}}}]}},{"id":"67ca5b98-8084-3d8d-aa0a-bb2afc7a167b","advisory":{"id":"SSA-942865","description":"SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products","summary":"SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html).\nSiemens recommends to update the firmware of the integrated SCALANCE S615 device to the latest version. Siemens recommends specific countermeasures for products where the firmware update is not, or not yet applied.\n\nAdditional considerations regarding the specific impact of the vulnerabilities to SINAMICS MV products can be found in the chapter \"Additional Information\".","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Jun 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-942865.json\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-942865.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-942865.txt\n","aliases":"CVE-2018-25032\nCVE-2021-42374\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0547\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-23308\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-35252\nCVE-2022-36946\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"4265c1a9-e42d-3dd8-806e-5f68868aabb7","product":{"name":"SINAMICS PERFECT HARMONY GH180 6SR5","vendor":{"name":"Siemens"}}}]}},{"id":"6b5bb1d9-9783-34b1-833d-af3d512203a4","advisory":{"id":"WID-SEC-W-2022-0071","description":"OpenSSL: Mehrere Schwachstellen","summary":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.","datePublished":"May 3, 2022, 10:00:00 PM","dateUpdated":"Feb 9, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0071.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2022-0071\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"020b6934-f5f0-3d9d-81f2-1c90446291ed","product":{"name":"Gentoo Linux","vendor":{"name":"gentoo"}}},{"id":"027747b0-7844-35fb-a0ec-1b7a252e4878","product":{"name":"18.5.4","vendor":{"name":"Sophos"}}},{"id":"02a1eb96-773b-3560-8d4f-16781d2549ac","product":{"name":"platform","vendor":{"name":"runZero"}}},{"id":"03f91009-4d62-3678-b3e2-5a4cddc68edd","product":{"name":"19.11.0.5","vendor":{"name":"Dell"}}},{"id":"0433ef04-8fb8-34bc-81d3-bd363fbcf8a7","product":{"name":"Networker","vendor":{"name":"Dell"}}},{"id":"04585260-5e9a-3763-bfbc-9d2c7cb80e62","product":{"name":"Junos ","vendor":{"name":"Juniper Networks"}}},{"id":"0931c5a8-f52e-3f16-a578-83d231524110","product":{"name":"11.7","vendor":{"name":"IBM"}}},{"id":"19b2ce4e-01ad-3e0b-951c-4c8b3df2ca00","product":{"name":"OpenSSL","vendor":{"name":"OpenSSL"}}},{"id":"212424d3-c849-343c-b69b-1e2c9df25fa2","product":{"name":"19.12.0.2","vendor":{"name":"Dell"}}},{"id":"26a39a8c-d8ea-310f-b299-a453e0339e0b","product":{"name":"19.11.0.6","vendor":{"name":"Dell"}}},{"id":"2bd861d0-dc3b-3a01-a8a4-e66842c079b7","product":{"name":"18.2.0","vendor":{"name":"open source"}}},{"id":"2d82c58c-7245-3459-9869-6cec2063af35","product":{"name":"10.0.0.0-10.0.6.1","vendor":{"name":"IBM"}}},{"id":"2fec08a8-7547-3425-b551-5be2263ee61a","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}},{"id":"31f9d759-1836-36c5-9da8-1f47469693ab","product":{"name":"1.1.1o","vendor":{"name":"open source"}}},{"id":"37fd2155-6a8c-303e-9369-0f577e8de630","product":{"name":"2025.4","vendor":{"name":"SolarWinds "}}},{"id":"3d0892bf-ae38-3a6d-8cc7-d94f4a52b351","product":{"name":"IBM Spectrum Protect","vendor":{"name":"IBM"}}},{"id":"3d7e5861-b65b-3ee2-ad01-3465090f77cf","product":{"name":"Node.js","vendor":{"name":"Node.js"}}},{"id":"442a1555-c479-305b-b364-bf874b3d722a","product":{"name":"19.1","vendor":{"name":"Dell"}}},{"id":"4dcc1c14-32ee-3195-bb7c-5ff856416783","product":{"name":"22.3.79.2108","vendor":{"name":"Paessler"}}},{"id":"539b52c7-c611-3136-b66d-8fa2167c380f","product":{"name":"10.0.5-ISS-ISVA-FP000","vendor":{"name":"IBM"}}},{"id":"5f259d90-365e-349f-87f2-5c9321c3de5d","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"643369cf-c3be-3bf0-aa1a-87d119c93e08","product":{"name":"PRTG","vendor":{"name":"Paessler"}}},{"id":"6750554a-6312-3816-9a79-f800a5a457d3","product":{"name":"Dell NetWorker","vendor":{"name":"Dell"}}},{"id":"6b570d30-7273-3c82-aa4c-b0d2781fdb1d","product":{"name":"Evolved","vendor":{"name":"Juniper"}}},{"id":"6eaecd1c-8cda-3e6a-bd5c-485f6aa6b892","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"73628a6c-e73c-3693-a60a-a5cd96d36406","product":{"name":"Amazon Linux 2","vendor":{"name":"Amazon"}}},{"id":"765d93cd-2a29-30c9-84c8-7097bfe313e6","product":{"name":"3.0.3","vendor":{"name":"Red Hat"}}},{"id":"83f30c79-3142-3ded-b310-e0e4b7752ca9","product":{"name":"NetApp ActiveIQ Unified Manager","vendor":{"name":"NetApp"}}},{"id":"8c48e3ee-fa77-3ad4-847a-d69c7b1380b4","product":{"name":"Hitachi Ops Center","vendor":{"name":"Hitachi"}}},{"id":"96cd7761-6306-385b-8590-8d61a2e1723c","product":{"name":"19.13","vendor":{"name":"Dell"}}},{"id":"9985e1f4-5571-37f2-a66e-310bbf42ff82","product":{"name":"Oracle Solaris","vendor":{"name":"Oracle Corporation"}}},{"id":"a30e6e54-a472-34da-a2ca-52d0473d014c","product":{"name":"Debian Linux","vendor":{"name":"Debian"}}},{"id":"a46a95fd-c068-36d0-a4a0-6ced869823df","product":{"name":"1.0.2ze","vendor":{"name":"open source"}}},{"id":"b303f571-fd76-3874-9b29-9c37d0579558","product":{"name":"Firewall","vendor":{"name":"Comodo"}}},{"id":"bd0b2b93-9fa5-3ec7-9d93-a64059f410f0","product":{"name":"Broadcom Fabric OS","vendor":{"name":"Broadcom"}}},{"id":"bdccce3b-e788-356b-895e-d37a8c67d0b2","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"cc41ceb6-0085-3cc1-99e4-fa2a4bdcf5d4","product":{"name":"Nessus","vendor":{"name":"Tenable"}}},{"id":"dcd655a3-7094-33ef-8277-18488d4901c5","product":{"name":"19.14","vendor":{"name":"Dell"}}},{"id":"df775312-51ef-33e4-9018-d48a214c28b7","product":{"name":"8.15.9","vendor":{"name":"Tenable Security"}}},{"id":"e41d8463-93dd-3a41-b16d-fcfd59355614","product":{"name":"Security Verify Access","vendor":{"name":"IBM"}}},{"id":"efb99ab2-f4eb-37ef-8006-a23191acf1f7","product":{"name":"InfoSphere Information Server","vendor":{"name":"IBM"}}},{"id":"f23bff81-fbc4-3acd-9fba-8e979768bdbc","product":{"name":"Red Hat OpenShift","vendor":{"name":"Red Hat"}}},{"id":"f938b8e6-66a0-3efb-be9e-3f290baae1cc","product":{"name":"Tenable Security Nessus Network Monitor","vendor":{"name":"Tenable Security"}}}]}},{"id":"6d389a24-07b3-308d-bc7f-af56aca7714d","advisory":{"id":"ICSA-23-047-03","description":"Siemens Brownfield Connectivity Client","summary":"Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS).\n\nSiemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.","datePublished":"Feb 14, 2023, 12:00:00 AM","dateUpdated":"Feb 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-953464.json\nhttps://cert-portal.siemens.com/productcert/txt/ssa-953464.txt\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-047-03.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-047-03\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"1598a5aa-8011-3971-9dea-011afa483957","product":{"name":"Brownfield Connectivity - Client","vendor":{"name":"Siemens"}}}]}},{"id":"889d1d2d-d353-3a21-b2e4-faa6d54d6b54","advisory":{"id":"ICSA-23-166-12","description":"Siemens SINAMICS Medium Voltage Products","summary":"SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 (\nhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html).\nSiemens recommends to update the firmware of the integrated SCALANCE S615 device to the latest version. Siemens recommends specific countermeasures for products where the firmware update is not, or not yet applied.\n\nAdditional considerations regarding the specific impact of the vulnerabilities to SINAMICS MV products can be found in the chapter \"Additional Information\".","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Jun 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-942865.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-942865.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-942865.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-942865.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-12.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-166-12\n","aliases":"CVE-2018-25032\nCVE-2021-42374\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0547\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1473\nCVE-2022-23308\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-35252\nCVE-2022-36946\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"56a88dec-2fa3-3bf7-839b-f805cbf13f09","product":{"name":"SINAMICS PERFECT HARMONY GH180 6SR5","vendor":{"name":"Siemens"}}},{"id":"b29353c9-e377-3980-8aef-9e94424138a8","product":{"name":"SINAMICS SL150","vendor":{"name":"Siemens"}}}]}},{"id":"8cdb641c-1491-36c1-9454-787f6c46d603","advisory":{"id":"WID-SEC-W-2023-1432","description":"Siemens SIMATIC S7: Mehrere Schwachstellen","summary":"Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, physischer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.","datePublished":"Jun 12, 2023, 10:00:00 PM","dateUpdated":"Jun 22, 2023, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1432.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2023-1432\n","aliases":"CVE-2023-26607\nCVE-2023-23559\nCVE-2023-23455\nCVE-2023-23454\nCVE-2023-1095\nCVE-2023-1077\nCVE-2023-1073\nCVE-2023-0590\nCVE-2023-0466\nCVE-2023-0465\nCVE-2023-0464\nCVE-2023-0394\nCVE-2023-0286\nCVE-2023-0215\nCVE-2023-0179\nCVE-2022-47946\nCVE-2022-47929\nCVE-2022-47520\nCVE-2022-47518\nCVE-2022-4662\nCVE-2022-4450\nCVE-2022-4378\nCVE-2022-43750\nCVE-2022-4304\nCVE-2022-42896\nCVE-2022-42895\nCVE-2022-42722\nCVE-2022-42721\nCVE-2022-42720\nCVE-2022-42719\nCVE-2022-42703\nCVE-2022-42432\nCVE-2022-42329\nCVE-2022-42328\nCVE-2022-41850\nCVE-2022-41849\nCVE-2022-41674\nCVE-2022-4139\nCVE-2022-4129\nCVE-2022-41222\nCVE-2022-41218\nCVE-2022-4095\nCVE-2022-40768\nCVE-2022-40307\nCVE-2022-39190\nCVE-2022-39188\nCVE-2022-36946\nCVE-2022-36879\nCVE-2022-3649\nCVE-2022-3646\nCVE-2022-3635\nCVE-2022-3633\nCVE-2022-3629\nCVE-2022-36280\nCVE-2022-3628\nCVE-2022-3625\nCVE-2022-3621\nCVE-2022-36123\nCVE-2022-3606\nCVE-2022-3594\nCVE-2022-3586\nCVE-2022-3565\nCVE-2022-3564\nCVE-2022-3545\nCVE-2022-3534\nCVE-2022-3524\nCVE-2022-3521\nCVE-2022-34918\nCVE-2022-3435\nCVE-2022-3303\nCVE-2022-32296\nCVE-2022-32250\nCVE-2022-3169\nCVE-2022-3115\nCVE-2022-3104\nCVE-2022-3028\nCVE-2022-30065\nCVE-2022-2978\nCVE-2022-2959\nCVE-2022-2905\nCVE-2022-28391\nCVE-2022-2663\nCVE-2022-26373\nCVE-2022-2602\nCVE-2022-2588\nCVE-2022-2586\nCVE-2022-2585\nCVE-2022-2503\nCVE-2022-2327\nCVE-2022-23219\nCVE-2022-23218\nCVE-2022-2274\nCVE-2022-2153\nCVE-2022-21505\nCVE-2022-21233\nCVE-2022-21166\nCVE-2022-21125\nCVE-2022-21123\nCVE-2022-2097\nCVE-2022-2078\nCVE-2022-2068\nCVE-2022-20572\nCVE-2022-20566\nCVE-2022-20422\nCVE-2022-20421\nCVE-2022-1882\nCVE-2022-1852\nCVE-2022-1679\nCVE-2022-1473\nCVE-2022-1462\nCVE-2022-1434\nCVE-2022-1343\nCVE-2022-1292\nCVE-2022-1184\nCVE-2022-1012\nCVE-2022-0171\nCVE-2021-42386\nCVE-2021-42385\nCVE-2021-42384\nCVE-2021-42383\nCVE-2021-42382\nCVE-2021-42381\nCVE-2021-42380\nCVE-2021-42379\nCVE-2021-42378\nCVE-2021-42377\nCVE-2021-42376\nCVE-2021-42375\nCVE-2021-42374\nCVE-2021-42373\nCVE-2021-4037\nCVE-2021-3999\nCVE-2021-3998\nCVE-2021-38604\nCVE-2021-3759\nCVE-2021-35942\nCVE-2021-33655\nCVE-2021-33574\nCVE-2021-3326\nCVE-2021-28831\nCVE-2021-27645\nCVE-2021-20269\nCVE-2020-29562\nCVE-2020-27618\nCVE-2020-1752\nCVE-2020-10029\nCVE-2019-25013\nCVE-2018-13405\nCVE-2016-10228\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0a84d05e-2ad5-33f4-8071-e40d974aa259","product":{"name":"Ubuntu Linux","vendor":{"name":"Canonical"}}},{"id":"749d0ae4-893f-311f-a6e2-e2656e077e21","product":{"name":"Siemens SIMATIC S7 1500 TM MFP","vendor":{"name":"Siemens"}}}]}},{"id":"94a2a9af-012a-300f-a8df-4dad0519e75f","advisory":{"id":"openSUSE-SU-2024:12204-1","description":"libopenssl-3-devel-3.0.5-1.1 on GA media","summary":"libopenssl-3-devel-3.0.5-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 8:33:49 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12204-1.json\nhttps://www.suse.com/security/cve/CVE-2022-1292/\nhttps://www.suse.com/security/cve/CVE-2022-1343/\nhttps://www.suse.com/security/cve/CVE-2022-1434/\nhttps://www.suse.com/security/cve/CVE-2022-1473/\nhttps://www.suse.com/security/cve/CVE-2022-2097/\nhttps://www.suse.com/security/cve/CVE-2022-2274/\n","aliases":"CVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2097\nCVE-2022-2274\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"09de3509-c075-3abb-9d69-94a57522d4a4","product":{"name":"libopenssl-3-devel-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0b5e5e96-a807-3c55-a0ff-ba4baf8ec1f7","product":{"name":"openssl-3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0c8d372a-c1f8-359d-95a3-e4cd98d74464","product":{"name":"libopenssl3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0cf4fb0f-e01e-3bb1-8c7f-482094868345","product":{"name":"libopenssl3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0fe4f858-8eb3-34b2-bc4a-5a84aba04147","product":{"name":"openssl-3-doc-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"189ef1b1-60b9-34b8-88c3-2346efd14aa9","product":{"name":"libopenssl3-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1b608f70-87d6-3984-9496-74603ee49b02","product":{"name":"libopenssl3-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1ce94917-e6fb-36b4-ada4-3b32a56efe42","product":{"name":"openssl-3-doc-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"27e4c760-1d21-3b1c-8e64-a8f6721d318f","product":{"name":"openssl-3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2bed438f-acc5-364b-91f5-0ba15c19f558","product":{"name":"openssl-3-doc-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2c1dec0e-9d0c-399b-bf6a-71a798d9da74","product":{"name":"openssl-3-doc-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"36237974-448d-3486-9430-9f065b3015db","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3a25264b-8081-311f-862c-f32b8d93571a","product":{"name":"openssl-3-doc-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b804d2c-5f1d-3822-95cc-c9d0ea994690","product":{"name":"openssl-3-doc-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3fb3031d-da4c-3270-acd7-6200ac672268","product":{"name":"libopenssl3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4707fc2e-006c-3b2b-9962-e1de4f7f53cd","product":{"name":"libopenssl3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"480a2756-f27e-3158-bf07-54c11d2f849c","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4cf0c1f1-b2e0-3eb6-a426-1900f4e3c1de","product":{"name":"libopenssl-3-devel-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4e72511d-3b0a-37e1-adb5-2bf784c9aa5f","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5be02499-9a53-3d64-90ac-a78b73e2cfbd","product":{"name":"openssl-3-doc-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5df48f2d-2518-37c3-b47c-e91186f5043f","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5f801af4-a7dd-30b8-a19f-4e766047e571","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"629dd70f-05a0-3e43-a6b6-96d79cbb539e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"64e1d9f1-1a60-3ae7-88e6-904a7224a3f2","product":{"name":"libopenssl3-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7038e021-3fff-31e0-b619-d0e4e374a564","product":{"name":"libopenssl3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"77c6ce2a-fbe6-3161-afb4-831c4f862f1c","product":{"name":"libopenssl-3-devel-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a0bd8c8-55f5-373d-918d-14e3b63f59d1","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"86cedd9f-7b55-3ddd-adf2-64db225c7e51","product":{"name":"openssl-3-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8a9b8127-a485-31dc-89af-3c292eb3e805","product":{"name":"openssl-3-doc-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8e45b7f8-6845-3d58-9e1b-2b2846034f52","product":{"name":"openssl-3-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"91cc6ba3-5ab4-3400-9233-f228e81ef1c5","product":{"name":"libopenssl-3-devel-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"983ab188-5187-3ff1-b7b0-3187d38d354b","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9953bfc8-3656-3505-89ca-7582107bdc06","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9976c319-e6ab-38c5-9e8f-825331c298bf","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9ce5cdf2-086b-330c-9ecd-f3c255c03f1c","product":{"name":"libopenssl3-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a154f7ed-a529-3f9e-9899-fca202f84621","product":{"name":"openssl-3-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a888a862-5b07-3c73-91cd-26547eb10dee","product":{"name":"openssl-3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b11246b8-b154-3462-9db5-b97680dbfdbc","product":{"name":"libopenssl3-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b57b69df-e672-3e78-857d-e97e9303543b","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"bcd22274-6166-3e34-ae26-06b8a08ad993","product":{"name":"libopenssl3-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"bf6f59df-b4c9-3805-b698-3ade30ed2914","product":{"name":"openssl-3-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c8351d12-d067-31a2-ae92-573638bf0bd7","product":{"name":"libopenssl3-0:3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ca477f17-84d4-36d2-b8b2-dd7dcbc9492c","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cbd2779a-5b74-3c71-b3d5-79bee834138d","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"da8f3e74-c069-357d-ac11-c0a6410a6866","product":{"name":"libopenssl3-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e8ef6620-2bb8-3f80-a079-2ec9e0acfa40","product":{"name":"openssl-3-3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb2d60fb-43b4-3ce2-9c23-de2cb92d8237","product":{"name":"libopenssl-3-devel-32bit-0:3.0.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f992f295-d1d1-3da8-af89-867e2ff0b598","product":{"name":"libopenssl-3-devel-32bit-3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fba91ff1-e71c-3ff9-81a5-20bf04201d0d","product":{"name":"libopenssl-3-devel-0:3.0.5-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"99dad5df-cd06-3b03-a042-05cb73e79edf","advisory":{"id":"SSA-419740","description":"SSA-419740: Multiple\tThird-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2","summary":"Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.","datePublished":"Mar 14, 2023, 12:00:00 AM","dateUpdated":"Mar 14, 2023, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/pdf/ssa-419740.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-419740.txt\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-419740.json\n","aliases":"CVE-2018-25032\nCVE-2019-1125\nCVE-2021-4034\nCVE-2021-4149\nCVE-2021-26401\nCVE-2021-42373\nCVE-2021-42374\nCVE-2021-42375\nCVE-2021-42376\nCVE-2021-42377\nCVE-2021-42378\nCVE-2021-42379\nCVE-2021-42380\nCVE-2021-42381\nCVE-2021-42382\nCVE-2021-42383\nCVE-2021-42384\nCVE-2021-42385\nCVE-2021-42386\nCVE-2022-0001\nCVE-2022-0002\nCVE-2022-0494\nCVE-2022-0547\nCVE-2022-1011\nCVE-2022-1016\nCVE-2022-1198\nCVE-2022-1199\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1353\nCVE-2022-1473\nCVE-2022-1516\nCVE-2022-1652\nCVE-2022-1729\nCVE-2022-1734\nCVE-2022-1974\nCVE-2022-1975\nCVE-2022-2380\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-20158\nCVE-2022-23036\nCVE-2022-23037\nCVE-2022-23038\nCVE-2022-23039\nCVE-2022-23040\nCVE-2022-23041\nCVE-2022-23042\nCVE-2022-23308\nCVE-2022-26490\nCVE-2022-28356\nCVE-2022-28390\nCVE-2022-30065\nCVE-2022-30594\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32296\nCVE-2022-32981\nCVE-2022-33981\nCVE-2022-35252\nCVE-2022-36879\nCVE-2022-36946\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"0045cbd9-2584-3960-a90f-9582af20e79e","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"0a60ea7b-5475-3dbc-8bae-1a1dabf4bce5","product":{"name":"SCALANCE M874-3 (6GK5874-3AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"16622380-a9e6-37d9-a969-c2d83cdedab5","product":{"name":"SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"2dc52ea0-552b-366e-9b03-f508834d4de7","product":{"name":"SCALANCE M804PB (6GK5804-0AP00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"3da81320-392c-35a5-be08-d19e42c13a90","product":{"name":"SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"420d7d14-a199-300f-abaa-7cc840daeb4c","product":{"name":"RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)","vendor":{"name":"Siemens"}}},{"id":"64e1eb53-8b79-3468-88d9-e4e61f47f977","product":{"name":"SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"782df6ed-2eb9-3e32-82b0-2593db716c62","product":{"name":"RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)","vendor":{"name":"Siemens"}}},{"id":"84661218-9c99-3934-9b55-52beb440ad80","product":{"name":"SCALANCE S615 EEC (6GK5615-0AA01-2AA2)","vendor":{"name":"Siemens"}}},{"id":"8505b59b-e149-3f3e-98ba-43bc0f2ece87","product":{"name":"SCALANCE M874-2 (6GK5874-2AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"8bf27b79-c056-3edf-8230-cd37977fc7ba","product":{"name":"SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)","vendor":{"name":"Siemens"}}},{"id":"9831c0ba-6702-3830-9edd-0fab34e7bf54","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"af5f05ed-3784-3d22-8f58-59e3f3a34128","product":{"name":"SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)","vendor":{"name":"Siemens"}}},{"id":"d08eedaf-f724-3a35-b461-b02b49d928df","product":{"name":"SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)","vendor":{"name":"Siemens"}}},{"id":"e91cc70d-5568-31ec-b5f9-c7d53e983388","product":{"name":"SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)","vendor":{"name":"Siemens"}}},{"id":"e9b1a217-3e5c-3356-a17d-f84e6d4f3b86","product":{"name":"SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)","vendor":{"name":"Siemens"}}},{"id":"ecee0b35-1c1b-377b-9b97-40c7e04c19fc","product":{"name":"SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)","vendor":{"name":"Siemens"}}},{"id":"f0749bf5-e2bc-3a07-b46e-754c2812a152","product":{"name":"SCALANCE M876-4 (6GK5876-4AA10-2BA2)","vendor":{"name":"Siemens"}}},{"id":"f24f3cb6-46d8-35e0-a308-bd12ad705da9","product":{"name":"SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)","vendor":{"name":"Siemens"}}},{"id":"f26450be-712d-3c52-b794-642124b29f48","product":{"name":"SCALANCE S615 (6GK5615-0AA00-2AA2)","vendor":{"name":"Siemens"}}}]}},{"id":"9dc02aa4-608e-3bd2-8c93-69df4332dd23","advisory":{"id":"ICSA-23-348-10","description":"Siemens SIMATIC S7-1500","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version  \u003e\u003d V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (\nhttps://cert-portal.siemens.com/productcert/html/ssb-439005.html).","datePublished":"Dec 12, 2023, 12:00:00 AM","dateUpdated":"Aug 12, 2025, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-348-10.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10\n","aliases":"CVE-2013-0340\nCVE-2013-4235\nCVE-2014-7209\nCVE-2015-20107\nCVE-2016-3189\nCVE-2016-3709\nCVE-2016-4658\nCVE-2016-5131\nCVE-2016-9318\nCVE-2016-10228\nCVE-2016-10739\nCVE-2017-0663\nCVE-2017-7375\nCVE-2017-7376\nCVE-2017-9047\nCVE-2017-9048\nCVE-2017-9049\nCVE-2017-9050\nCVE-2017-15422\nCVE-2017-16931\nCVE-2017-16932\nCVE-2017-17512\nCVE-2017-18258\nCVE-2018-0495\nCVE-2018-12886\nCVE-2018-14404\nCVE-2018-14567\nCVE-2018-18928\nCVE-2018-19591\nCVE-2018-20482\nCVE-2018-20843\nCVE-2018-25032\nCVE-2019-3855\nCVE-2019-3856\nCVE-2019-3857\nCVE-2019-3858\nCVE-2019-3859\nCVE-2019-3860\nCVE-2019-3861\nCVE-2019-3862\nCVE-2019-3863\nCVE-2019-5018\nCVE-2019-5094\nCVE-2019-5188\nCVE-2019-5435\nCVE-2019-5436\nCVE-2019-5443\nCVE-2019-5481\nCVE-2019-5482\nCVE-2019-6109\nCVE-2019-6110\nCVE-2019-6111\nCVE-2019-6488\nCVE-2019-7309\nCVE-2019-8457\nCVE-2019-9169\nCVE-2019-9636\nCVE-2019-9674\nCVE-2019-9740\nCVE-2019-9923\nCVE-2019-9936\nCVE-2019-9937\nCVE-2019-9947\nCVE-2019-9948\nCVE-2019-10160\nCVE-2019-11360\nCVE-2019-12290\nCVE-2019-12900\nCVE-2019-12904\nCVE-2019-13057\nCVE-2019-13565\nCVE-2019-13627\nCVE-2019-15847\nCVE-2019-15903\nCVE-2019-16056\nCVE-2019-16168\nCVE-2019-16905\nCVE-2019-17498\nCVE-2019-17543\nCVE-2019-17594\nCVE-2019-17595\nCVE-2019-18224\nCVE-2019-18276\nCVE-2019-18348\nCVE-2019-19126\nCVE-2019-19242\nCVE-2019-19244\nCVE-2019-19317\nCVE-2019-19603\nCVE-2019-19645\nCVE-2019-19646\nCVE-2019-19880\nCVE-2019-19906\nCVE-2019-19923\nCVE-2019-19924\nCVE-2019-19925\nCVE-2019-19926\nCVE-2019-19956\nCVE-2019-19959\nCVE-2019-20218\nCVE-2019-20367\nCVE-2019-20388\nCVE-2019-20795\nCVE-2019-20907\nCVE-2019-25013\nCVE-2019-1010022\nCVE-2019-1010023\nCVE-2019-1010024\nCVE-2019-1010025\nCVE-2019-1010180\nCVE-2020-1712\nCVE-2020-1751\nCVE-2020-1752\nCVE-2020-6096\nCVE-2020-7595\nCVE-2020-8169\nCVE-2020-8177\nCVE-2020-8231\nCVE-2020-8284\nCVE-2020-8285\nCVE-2020-8286\nCVE-2020-8315\nCVE-2020-8492\nCVE-2020-9327\nCVE-2020-10029\nCVE-2020-10531\nCVE-2020-10543\nCVE-2020-10735\nCVE-2020-10878\nCVE-2020-11501\nCVE-2020-11655\nCVE-2020-11656\nCVE-2020-12062\nCVE-2020-12243\nCVE-2020-12723\nCVE-2020-12762\nCVE-2020-13434\nCVE-2020-13435\nCVE-2020-13529\nCVE-2020-13630\nCVE-2020-13631\nCVE-2020-13632\nCVE-2020-13776\nCVE-2020-13777\nCVE-2020-13871\nCVE-2020-14145\nCVE-2020-14422\nCVE-2020-15358\nCVE-2020-15523\nCVE-2020-15778\nCVE-2020-15801\nCVE-2020-19185\nCVE-2020-19186\nCVE-2020-19187\nCVE-2020-19188\nCVE-2020-19189\nCVE-2020-19190\nCVE-2020-19909\nCVE-2020-21047\nCVE-2020-21913\nCVE-2020-22218\nCVE-2020-24659\nCVE-2020-24977\nCVE-2020-25692\nCVE-2020-25709\nCVE-2020-25710\nCVE-2020-26116\nCVE-2020-27618\nCVE-2020-28196\nCVE-2020-29361\nCVE-2020-29362\nCVE-2020-29363\nCVE-2020-29562\nCVE-2020-29573\nCVE-2020-35525\nCVE-2020-35527\nCVE-2020-36221\nCVE-2020-36222\nCVE-2020-36223\nCVE-2020-36224\nCVE-2020-36225\nCVE-2020-36226\nCVE-2020-36227\nCVE-2020-36228\nCVE-2020-36229\nCVE-2020-36230\nCVE-2021-3177\nCVE-2021-3326\nCVE-2021-3426\nCVE-2021-3516\nCVE-2021-3517\nCVE-2021-3518\nCVE-2021-3520\nCVE-2021-3537\nCVE-2021-3541\nCVE-2021-3580\nCVE-2021-3733\nCVE-2021-3737\nCVE-2021-3826\nCVE-2021-3997\nCVE-2021-3998\nCVE-2021-3999\nCVE-2021-4122\nCVE-2021-4189\nCVE-2021-4209\nCVE-2021-20193\nCVE-2021-20227\nCVE-2021-20231\nCVE-2021-20232\nCVE-2021-20305\nCVE-2021-22876\nCVE-2021-22890\nCVE-2021-22897\nCVE-2021-22898\nCVE-2021-22901\nCVE-2021-22922\nCVE-2021-22923\nCVE-2021-22924\nCVE-2021-22925\nCVE-2021-22926\nCVE-2021-22945\nCVE-2021-22946\nCVE-2021-22947\nCVE-2021-23336\nCVE-2021-27212\nCVE-2021-27218\nCVE-2021-27219\nCVE-2021-27645\nCVE-2021-28041\nCVE-2021-28153\nCVE-2021-28363\nCVE-2021-28861\nCVE-2021-31239\nCVE-2021-32292\nCVE-2021-33294\nCVE-2021-33560\nCVE-2021-33574\nCVE-2021-33910\nCVE-2021-35942\nCVE-2021-36084\nCVE-2021-36085\nCVE-2021-36086\nCVE-2021-36087\nCVE-2021-36222\nCVE-2021-36690\nCVE-2021-37600\nCVE-2021-37750\nCVE-2021-38604\nCVE-2021-43396\nCVE-2021-43618\nCVE-2021-44879\nCVE-2021-45960\nCVE-2021-46143\nCVE-2021-46195\nCVE-2021-46828\nCVE-2021-46848\nCVE-2022-0391\nCVE-2022-0563\nCVE-2022-0778\nCVE-2022-1271\nCVE-2022-1292\nCVE-2022-1304\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1473\nCVE-2022-2068\nCVE-2022-2097\nCVE-2022-2274\nCVE-2022-2509\nCVE-2022-3715\nCVE-2022-3821\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-22576\nCVE-2022-22822\nCVE-2022-22823\nCVE-2022-22824\nCVE-2022-22825\nCVE-2022-22826\nCVE-2022-22827\nCVE-2022-23218\nCVE-2022-23219\nCVE-2022-23308\nCVE-2022-23852\nCVE-2022-23990\nCVE-2022-24407\nCVE-2022-25235\nCVE-2022-25236\nCVE-2022-25313\nCVE-2022-25314\nCVE-2022-25315\nCVE-2022-26488\nCVE-2022-27774\nCVE-2022-27775\nCVE-2022-27776\nCVE-2022-27778\nCVE-2022-27779\nCVE-2022-27780\nCVE-2022-27781\nCVE-2022-27782\nCVE-2022-27943\nCVE-2022-28321\nCVE-2022-29155\nCVE-2022-29824\nCVE-2022-30115\nCVE-2022-32205\nCVE-2022-32206\nCVE-2022-32207\nCVE-2022-32208\nCVE-2022-32221\nCVE-2022-35252\nCVE-2022-35260\nCVE-2022-35737\nCVE-2022-37434\nCVE-2022-37454\nCVE-2022-40303\nCVE-2022-40304\nCVE-2022-40674\nCVE-2022-42898\nCVE-2022-42915\nCVE-2022-42916\nCVE-2022-43551\nCVE-2022-43552\nCVE-2022-43680\nCVE-2022-45061\nCVE-2022-45873\nCVE-2022-46908\nCVE-2022-48303\nCVE-2022-48522\nCVE-2022-48560\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0361\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0687\nCVE-2023-1077\nCVE-2023-1206\nCVE-2023-2650\nCVE-2023-2953\nCVE-2023-3212\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3817\nCVE-2023-4016\nCVE-2023-4039\nCVE-2023-4623\nCVE-2023-4807\nCVE-2023-4813\nCVE-2023-4921\nCVE-2023-5156\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-5981\nCVE-2023-6121\nCVE-2023-6817\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-23914\nCVE-2023-23915\nCVE-2023-23916\nCVE-2023-24329\nCVE-2023-25136\nCVE-2023-25139\nCVE-2023-26604\nCVE-2023-27371\nCVE-2023-27533\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-27537\nCVE-2023-27538\nCVE-2023-28484\nCVE-2023-29383\nCVE-2023-29469\nCVE-2023-29491\nCVE-2023-29499\nCVE-2023-31085\nCVE-2023-32611\nCVE-2023-32636\nCVE-2023-32643\nCVE-2023-32665\nCVE-2023-34319\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35945\nCVE-2023-38408\nCVE-2023-39128\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-39615\nCVE-2023-40283\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45322\nCVE-2023-45853\nCVE-2023-45871\nCVE-2023-45898\nCVE-2023-45918\nCVE-2023-46862\nCVE-2023-52425\nCVE-2023-52426\nCVE-2023-52444\nCVE-2023-52464\nCVE-2023-52612\nCVE-2023-52622\nCVE-2023-52675\nCVE-2023-52699\nCVE-2024-0584\nCVE-2024-2004\nCVE-2024-2236\nCVE-2024-2379\nCVE-2024-2398\nCVE-2024-2466\nCVE-2024-2511\nCVE-2024-5535\nCVE-2024-5742\nCVE-2024-6409\nCVE-2024-7264\nCVE-2024-8096\nCVE-2024-8176\nCVE-2024-9143\nCVE-2024-11053\nCVE-2024-26645\nCVE-2024-26671\nCVE-2024-26679\nCVE-2024-26772\nCVE-2024-26773\nCVE-2024-26777\nCVE-2024-26805\nCVE-2024-26835\nCVE-2024-26863\nCVE-2024-26878\nCVE-2024-26880\nCVE-2024-26898\nCVE-2024-26901\nCVE-2024-26923\nCVE-2024-26957\nCVE-2024-26973\nCVE-2024-27020\nCVE-2024-27032\nCVE-2024-27065\nCVE-2024-27074\nCVE-2024-28182\nCVE-2024-28757\nCVE-2024-28834\nCVE-2024-28835\nCVE-2024-33621\nCVE-2024-34459\nCVE-2024-35807\nCVE-2024-35809\nCVE-2024-35830\nCVE-2024-35888\nCVE-2024-35910\nCVE-2024-35925\nCVE-2024-35944\nCVE-2024-36017\nCVE-2024-36286\nCVE-2024-36484\nCVE-2024-36904\nCVE-2024-36905\nCVE-2024-36934\nCVE-2024-37356\nCVE-2024-38596\nCVE-2024-38598\nCVE-2024-38612\nCVE-2024-38621\nCVE-2024-38780\nCVE-2024-39292\nCVE-2024-39469\nCVE-2024-39487\nCVE-2024-39489\nCVE-2024-40901\nCVE-2024-40959\nCVE-2024-41046\nCVE-2024-42070\nCVE-2024-42096\nCVE-2024-42106\nCVE-2024-42131\nCVE-2024-42154\nCVE-2024-43871\nCVE-2024-44944\nCVE-2024-44965\nCVE-2024-46743\nCVE-2024-46745\nCVE-2024-46750\nCVE-2024-47684\nCVE-2024-47701\nCVE-2024-47707\nCVE-2024-47737\nCVE-2024-48881\nCVE-2024-49881\nCVE-2024-49884\nCVE-2024-49948\nCVE-2024-49949\nCVE-2024-49952\nCVE-2024-49982\nCVE-2024-49997\nCVE-2024-50006\nCVE-2024-50040\nCVE-2024-50045\nCVE-2024-50251\nCVE-2024-50262\nCVE-2024-50299\nCVE-2024-50301\nCVE-2024-50602\nCVE-2024-52332\nCVE-2024-52533\nCVE-2024-53057\nCVE-2024-53124\nCVE-2024-53140\nCVE-2024-53164\nCVE-2024-53165\nCVE-2024-53217\nCVE-2024-56433\nCVE-2024-56569\nCVE-2024-56570\nCVE-2024-56600\nCVE-2024-56601\nCVE-2024-56606\nCVE-2024-56644\nCVE-2024-56650\nCVE-2024-56770\nCVE-2024-56779\nCVE-2024-56780\nCVE-2024-57884\nCVE-2024-57901\nCVE-2025-0167\nCVE-2025-0395\nCVE-2025-0665\nCVE-2025-0725\nCVE-2025-1390\nCVE-2025-3277\nCVE-2025-3360\nCVE-2025-21694\nCVE-2025-26466\nCVE-2025-29087\nCVE-2025-29088\nCVE-2025-32728\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"26a4a012-3d20-3531-9ad2-3b1852d9da67","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"761b361e-7ce1-3722-af4f-741f040a3b33","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":{"name":"Siemens"}}},{"id":"8bc56aee-7ecf-3958-bd53-56ecf79ed7a5","product":{"name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"9f01a9cd-8738-3080-933b-fddb63986d19","product":{"name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":{"name":"Siemens"}}},{"id":"a67add6a-e816-35b6-bd31-15201d487425","product":{"name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":{"name":"Siemens"}}}]}},{"id":"db943b15-6093-38b2-8768-5b4adae27236","advisory":{"id":"SSA-794697","description":"SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1","summary":"Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version.\n\nSIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won\u0027t be any update to the CVE list anymore. Please update to the latest version. \n\nThis advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).","datePublished":"Jun 13, 2023, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-794697.json\n","aliases":"CVE-2020-12762\nCVE-2021-3759\nCVE-2021-4037\nCVE-2021-33655\nCVE-2021-44879\nCVE-2022-0171\nCVE-2022-1012\nCVE-2022-1015\nCVE-2022-1184\nCVE-2022-1292\nCVE-2022-1343\nCVE-2022-1434\nCVE-2022-1462\nCVE-2022-1473\nCVE-2022-1679\nCVE-2022-1852\nCVE-2022-1882\nCVE-2022-2068\nCVE-2022-2078\nCVE-2022-2097\nCVE-2022-2153\nCVE-2022-2274\nCVE-2022-2327\nCVE-2022-2503\nCVE-2022-2586\nCVE-2022-2588\nCVE-2022-2602\nCVE-2022-2663\nCVE-2022-2905\nCVE-2022-2959\nCVE-2022-2978\nCVE-2022-3028\nCVE-2022-3104\nCVE-2022-3115\nCVE-2022-3169\nCVE-2022-3303\nCVE-2022-3521\nCVE-2022-3524\nCVE-2022-3534\nCVE-2022-3545\nCVE-2022-3564\nCVE-2022-3565\nCVE-2022-3586\nCVE-2022-3594\nCVE-2022-3606\nCVE-2022-3621\nCVE-2022-3625\nCVE-2022-3628\nCVE-2022-3629\nCVE-2022-3633\nCVE-2022-3635\nCVE-2022-3646\nCVE-2022-3649\nCVE-2022-4095\nCVE-2022-4129\nCVE-2022-4139\nCVE-2022-4269\nCVE-2022-4304\nCVE-2022-4450\nCVE-2022-4662\nCVE-2022-20421\nCVE-2022-20422\nCVE-2022-20566\nCVE-2022-20572\nCVE-2022-21123\nCVE-2022-21125\nCVE-2022-21166\nCVE-2022-21505\nCVE-2022-26373\nCVE-2022-32250\nCVE-2022-32296\nCVE-2022-34918\nCVE-2022-36123\nCVE-2022-36280\nCVE-2022-36879\nCVE-2022-36946\nCVE-2022-39188\nCVE-2022-39190\nCVE-2022-40307\nCVE-2022-40768\nCVE-2022-41218\nCVE-2022-41222\nCVE-2022-41674\nCVE-2022-41849\nCVE-2022-41850\nCVE-2022-42328\nCVE-2022-42329\nCVE-2022-42432\nCVE-2022-42703\nCVE-2022-42719\nCVE-2022-42720\nCVE-2022-42721\nCVE-2022-42722\nCVE-2022-42895\nCVE-2022-42896\nCVE-2022-43750\nCVE-2022-47518\nCVE-2022-47520\nCVE-2022-47929\nCVE-2022-47946\nCVE-2023-0215\nCVE-2023-0286\nCVE-2023-0464\nCVE-2023-0465\nCVE-2023-0466\nCVE-2023-0590\nCVE-2023-1077\nCVE-2023-1095\nCVE-2023-1206\nCVE-2023-2898\nCVE-2023-3141\nCVE-2023-3268\nCVE-2023-3338\nCVE-2023-3389\nCVE-2023-3446\nCVE-2023-3609\nCVE-2023-3610\nCVE-2023-3611\nCVE-2023-3772\nCVE-2023-3773\nCVE-2023-3777\nCVE-2023-4004\nCVE-2023-4015\nCVE-2023-4273\nCVE-2023-4623\nCVE-2023-4911\nCVE-2023-4921\nCVE-2023-5178\nCVE-2023-5197\nCVE-2023-5678\nCVE-2023-5717\nCVE-2023-6606\nCVE-2023-6931\nCVE-2023-6932\nCVE-2023-7008\nCVE-2023-7104\nCVE-2023-23454\nCVE-2023-23455\nCVE-2023-23559\nCVE-2023-26607\nCVE-2023-31085\nCVE-2023-31436\nCVE-2023-32233\nCVE-2023-35001\nCVE-2023-35827\nCVE-2023-36660\nCVE-2023-37453\nCVE-2023-39189\nCVE-2023-39192\nCVE-2023-39193\nCVE-2023-39194\nCVE-2023-42753\nCVE-2023-42754\nCVE-2023-42755\nCVE-2023-45863\nCVE-2023-45871\nCVE-2023-48795\nCVE-2023-50495\nCVE-2023-51384\nCVE-2023-51385\nCVE-2023-51767\nCVE-2024-0232\nCVE-2024-0553\nCVE-2024-0567\nCVE-2024-0584\nCVE-2024-0684\nCVE-2024-22365\nCVE-2024-25062\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"4f2e0c95-7647-339e-8933-0e8193e84456","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}},{"id":"c38e2269-4e1f-3718-85df-58bd4afb0f1e","product":{"name":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":{"name":"Siemens"}}}]}}]}