Siplus S7-1500 Cpu 1518-4 Pn/dp Mfp Firmware vulnerabilities

3 known vulnerabilities in Siplus S7-1500 Cpu 1518-4 Pn/dp Mfp Firmware from Siemens. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-5535Jun 27, 2024OpenSSLEPSS 6.13%

  Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such

• 7.5 High severity

  HTTP/2 Rapid Reset Attack Exploited

  CVE-2023-44487Oct 10, 2023IETFEPSS 100%

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

• 7.8 High severity

  GNU C Library Buffer Overflow Exploited

  CVE-2023-4911Oct 3, 2023Red HatEPSS 63.8%

  A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binari