SSA-879734

csafDEsiemens_psirt

SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1

view advisory published 2024-06-11

Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2023-0466USmedium5.3—
The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the…
CVE-2023-0465USmedium5.3—
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policie…
CVE-2023-0464UShigh7.5Exploit
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attacke…
CVE-2023-0286UShigh7.4—
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure def…
CVE-2023-0215UShigh7.5—
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 st…
CVE-2022-4450UShigh7.5—
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds th…
CVE-2022-4304USmedium5.9Exploit
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.…
CVE-2022-2097USmedium5.3OT elevatedExploit
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixte…
02

references

External citations — patches, advisories, analysis.

03

remediations (208)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan