SCALANCE W1750D (ROW) vulnerabilities

4 known vulnerabilities in SCALANCE W1750D (ROW) from Siemens. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2023-0286Feb 8, 2023OpenSSLEPSS 68.4%

  There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field

• 7.5 High severity

  OpenSSL: Use After Free

  CVE-2023-0215Feb 8, 2023OpenSSLEPSS 5.02%

  The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications.

• 7.5 High severity

  OpenSSL: Double Free

  CVE-2022-4450Feb 8, 2023OpenSSLEPSS 28.6%

  The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to

• 7.5 High severity

  OpenSSL: Loop with Unreachable Exit Condition

  CVE-2022-0778Mar 15, 2022OpenSSLEPSS 73.2%

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex