CyberSecBulletin

Extended Keccak Code Package Project vulnerabilities

We track 1 vulnerability in Extended Keccak Code Package Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Extended Keccak Code Package Project vulnerabilities

  • 9.8 Critical severity

    RUGGEDCOM APE1808: Integer Overflow or Wraparound

    CVE-2022-37454SiemensEPSS 7.41%

    The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.