CVE-2020-35525 — high

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
BehobenSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Only build and run applications from trusted sources.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-476USprimärCWE-476USCWE-476USCWE-476US

04

betroffene Produkte (58)

Betroffene Produkte und Versionsbereiche.

Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShiftalle Versionencert_bundDEcpe:/a:redhat:openshift:-
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)alle Versionencisa_csaf_otUS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)alle Versionencisa_csaf_otUS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)alle Versionencisa_csaf_otUS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)alle Versionencisa_csaf_otUS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)alle Versionencisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)≤ vers:intdot/>=3.1.0|<3.1.5cisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)≤ vers:intdot/>=3.1.0|<3.1.5cisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)≤ vers:intdot/>=3.1.0|<3.1.5cisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)≤ vers:intdot/>=3.1.0|<3.1.5cisa_csaf_otUS
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)≤ vers:intdot/>=3.1.0|<3.1.5cisa_csaf_otUS
n/a SQLite≤ sqlite 3.31.1enisa_euvdEU
Siemens Building X - Security Manager Edge Controller (ACC-AP)≤ vers:unknown/*ncsc_nlNL
Siemens COMOS V10.4≤ vers:unknown/*ncsc_nlNL
Siemens COMOS V10.4.5≤ vers:unknown/*ncsc_nlNL
Siemens COMOS V10.5≤ vers:unknown/*ncsc_nlNL
Siemens COMOS V10.5.2≤ vers:unknown/*ncsc_nlNL
Siemens COMOS V10.6≤ vers:unknown/*ncsc_nlNL

20 von 58 angezeigt

05

Advisories (7)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-398330SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.52023-12-12csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 are no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
WID-SEC-W-2022-1863Red Hat Enterprise Linux (SQLite): Mehrere SchwachstellenDeutsch2022-10-25csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der SQLite Implementierung ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
WID-SEC-W-2023-1614Tenable Security Nessus Network Monitor: Mehrere SchwachstellenDeutsch2023-06-29csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.
ICSA-23-348-10Siemens SIMATIC S7-15002023-12-12icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 ( https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
BIT-sqlite-2020-355252024-03-06vendor · osvUS
In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund cisa_csaf_ot ncsc_nl siemens_psirt osv NVD CVE.org MITRE

veröffentlicht 2022-09-01geändert 2026-06-17

08

verwandt (8,786)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-21525US	—OT kritisch	4.87% (92nd)	KEV	2026-02-10
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
CVE-2010-0425US	high10.0	94.2% (100th)	Exploit	2010-03-05
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure…
CVE-2012-0779US	high9.3	87.1% (100th)	Exploit	2012-05-04
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x a…
CVE-2012-5896US	high10.0	68.7% (99th)	Exploit	2012-11-17
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers…
CVE-2003-0772US	high7.5	84.9% (100th)	Exploit	2003-09-22
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT…

+8781 weitere

09

Referenzen (32)

Externe Belege — Patches, Meldungen, Analysen.