SSA-333517

csafDEsiemens_psirt

SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0

Advisory ansehen veröffentlicht 2022-12-13

Multiple vulnerabilities affecting various third-party components of the SCALANCE SC-600 family could allow an attacker to cause a denial of service condition, corrupt memory or potentially execute custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-32206USmedium6.5—
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number o…
CVE-2022-32205USmedium4.3—
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookie…
CVE-2022-30065UShigh7.8—
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
CVE-2018-25032UShigh7.5Exploit
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (24)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan