SINAMICS PERFECT HARMONY GH180 vulnerabilities

3 known vulnerabilities in SINAMICS PERFECT HARMONY GH180 from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  https://github.com/curl/curl: Incorrect Default Permissions

  CVE-2022-32207Jul 7, 2022Https://github.com/curl/curlEPSS 12.3%

  When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the perm

• 7.5 High severity

  OpenSSL: Incomplete Cleanup

  CVE-2022-1473May 3, 2022OpenSSLEPSS 4.68%

  The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes cert

• 7.3 High severity

  OpenSSL: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-1292May 3, 2022OpenSSLEPSS 82.6%

  The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrar