CVE-2021-43527

highPriorität · beachten · 45EPSS 0.176 · 97. PerzentilDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

17.6% (97th) EPSS

CVSS 7.5 · high

Is it mine?

43 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-23

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM APE1808siemens_psirt
Upgrade Palo Alto Networks Virtual NGFW V11.1.2-h3. Contact customer support to receive patch and update information
BehobenRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/
BehobenRUGGEDCOM APE1808cisa_csaf_ot
Upgrade Palo Alto Networks Virtual NGFW V11.1.2-h3. Contact customer support to receive patch and update information
MitigationRUGGEDCOM ROX MX5000siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1400siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1500siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1501siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1510siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1511siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1512siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1524siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX1536siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).
MitigationRUGGEDCOM ROX RX5000siemens_psirt
Reconfigure IPsec connections to use a pre-shared key (PSK).

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USprimärCWE-122USCWE-787USCWE-787US

betroffene Produkte (43)

Betroffene Produkte und Versionsbereiche.

Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
Xerox FreeFlow Print Server 7alle Versionencert_bundDEcpe:/a:xerox:freeflow_print_server:7
Xerox FreeFlow Print Server 9alle Versionencert_bundDEcpe:/a:xerox:freeflow_print_server:9
RUGGEDCOM APE1808alle Versionencisa_csaf_otUS
Siemens RUGGEDCOM APE1808≤ vers:all/*cisa_csaf_otUS
Mozilla nssunspecified → 3.68.1enisa_euvdEU
Mozilla nssunspecified → 3.73enisa_euvdEU
Amazon.com Inc. Amazon Linux AMI≤ 2017.03fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.6 Update Services for SAP Solutionsfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.3 Advanced Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.4 Advanced Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.1 Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.2 Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.6 Advanced Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.4 Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.1 Update Services for SAP Solutionsfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.7 Telco Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.7 Advanced Update Supportfstec_bduRU

20 von 43 angezeigt

Advisories (8)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-455250SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h32024-04-09csaf · siemens_psirtDE
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/
SSA-594438SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products2022-03-08csaf · siemens_psirtDE
A vulnerability in the RUGGEDCOM ROX devices' third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates. Siemens has released updates for the affected products and recommends to update to the latest versions.
WID-SEC-W-2022-0302Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit AdministratorrechtenDeutsch2022-06-14csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.
WID-SEC-W-2022-0432Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2022-06-21csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.
WID-SEC-W-2022-0810Mozilla NSS: Schwachstelle ermöglicht CodeausführungDeutsch2021-12-01csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla NSS ausnutzen, um beliebigen Programmcode auszuführen oder um die betreffende Anwendung zum Absturz zu bringen.
WID-SEC-W-2024-0114Oracle Systems: Mehrere SchwachstellenDeutsch2024-01-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Systems ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2024-1591Juniper JUNOS: Mehrere SchwachstellenDeutsch2024-07-10csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.
ICSA-24-102-04Siemens RUGGEDCOM APE18082024-04-09icsa · cisa_csaf_otUS
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2021-12-08geändert 2026-06-17

verwandt (16,031)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-86950US	—OT kritisch	1.24% (69th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing…
CVE-2026-87491US	—OT kritisch	3.14% (88th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-53362US	—OT kritisch	0.71% (53rd)	KEV	2026-07-04
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc…
CVE-2026-53266US	—OT kritisch	0.83% (57th)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-11645US	—OT kritisch	2.44% (84th)	KEV	2026-06-09
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…

+16026 weitere

Referenzen (67)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan