Veille CVE

Recherche « Siemens siplus s7-1500 cpu 1518-4 pn\/dp mfp firmware »

3 CVE

  1. CVE-2025-39964 5.5 Moyenne Exploitée

    Linux · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

  2. CVE-2023-44487 7.5 Élevée Exploitée

    ietf http · Siemens RUGGEDCOM APE1808 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  3. CVE-2023-4911 7.8 Élevée Exploitée

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.6 Extended Update Support · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.0 Extended Update Support

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.