SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0847US | high7.8OT critical | KEV | ||
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ker… | ||||
| CVE-2021-39293US | high7.5 | — | ||
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. N… | ||||
| CVE-2020-27304US | critical9.8 | — | ||
The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_ha… | ||||
| CVE-2021-41091US | medium6.3 | Exploit | ||
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`)… | ||||
| CVE-2021-41089US | medium6.3 | — | ||
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into… | ||||
| CVE-2021-41092US | high7.5 | — | ||
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a mis… | ||||
| CVE-2021-41103US | high7.8OT elevated | — | ||
containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some p… | ||||
| CVE-2021-20317US | medium4.4 | — | ||
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attac… | ||||
| CVE-2021-36221US | medium5.9 | — | ||
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. | ||||
| CVE-2021-33910US | medium5.5 | — | ||
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled b… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSCALANCE LPE9403
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan