CVE-2025-9232

mediumPriorität · verfolgen · 1EPSS 0.020 · 81. PerzentilDEEUFRNLRUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.00% (81st) EPSS
CVSS 5.9 · medium
Is it mine?
415 products
Prüfe deine Angriffsfläche
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-23

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSIMATIC CN 4100siemens_psirt

    Update to V5.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814144/
  • BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familysiemens_psirt

    See Section Additional Information.

  • BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)siemens_psirt

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt

    Update to V4.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110002573/
  • BehobenSIDIS Primesiemens_psirt

    Update to V4.0.800 or later version

  • BehobenSIDIS Secured SmartPlugsiemens_psirt

    Update to V7.26.0310 or later version

  • Behobenlibopenssl-3-devel-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-32bit-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-32bit-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-32bit-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-devel-32bit-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-32bit-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-32bit-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-32bit-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-32bit-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-x86-64-v3-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-x86-64-v3-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-x86-64-v3-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl-3-fips-provider-x86-64-v3-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-32bit-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-32bit-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-32bit-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-32bit-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-x86-64-v3-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-x86-64-v3-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-x86-64-v3-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibopenssl3-x86-64-v3-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-doc-0:3.5.3-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-doc-0:3.5.3-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-doc-0:3.5.3-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenopenssl-3-doc-0:3.5.3-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familycisa_csaf_ot

    See Section Additional Information.

  • BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)cisa_csaf_ot

    Update to V3.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109997626/
  • BehobenSIDIS Primecisa_csaf_ot

    Update to V4.0.800 or later version

  • BehobenSIMATIC CN 4100cisa_csaf_ot

    Update to V5.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814144/
  • BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot

    Update to V4.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110002573/
  • BehobenSIDIS Secured SmartPlugcisa_csaf_ot

    Update to V7.26.0310 or later version

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Currently no fix is available

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.15.9mediumAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HsecondaryAusnutzbarkeit 2.2 · Auswirkung 3.6
v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE
v3.15.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security
v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-125USCWE-125USCWE-125USCWE-125USCWE-125US
05

betroffene Produkte (415)

Betroffene Produkte und Versionsbereiche.

20 von 415 angezeigt
06

Advisories (20)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2026-0079Kwetsbaarheden verholpen in Siemens productenNL2026-03-10csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Heliox, Ruggedcom, SICAM, SIDIS en SIMATIC.

  • NCSC-2026-0091Kwetsbaarheden verholpen in SAP-productenNL2026-03-12csaf · ncsc_nlNL

    SAP heeft kwetsbaarheden verholpen in verschillende producten, waaronder SAP Quotation Management Insurance en SAP NetWeaver. Een deel van de verholpen kwetsbaarheden bevind zich in producten van derde partijen - zoals Oracle - die verwerkt zitten in SAP producten.

  • NCSC-2026-0147Kwetsbaarheden verholpen in Siemens-productenNL2026-05-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in verschillende (OT-)producten. Het gaat onder andere om producten in de Siemens RUGGEDCOM-, SCALANCE-, SIMATIC-, SIMIT-, SINAMICS-, SIPROTEC-, SENTRON- en Solid Edge-productreeksen.

  • NCSC-2026-0229Kwetsbaarheden verholpen in Siemens productenNL2026-07-14csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als CADRA, IAM, Mendix, OpCenter, RUGGEDCOM, SIDIS en SIMATIC.

  • SSA-032379SSA-032379: Multiple Vulnerabilities in SIMATIC CN 4100 Before V5.02026-05-12csaf · siemens_psirtDE

    SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

  • SSA-082556SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.52025-06-10csaf · siemens_psirtDE

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

  • SSA-089022SSA-089022: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.32026-01-28csaf · siemens_psirtDE

    SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

  • SSA-253495SSA-253495: Multiple Vulnerabilities in SINEC OS before V4.02026-06-02csaf · siemens_psirtDE

    SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.

  • SSA-485750SSA-485750: Multiple Vulnerabilities in SIDIS Prime Before V4.0.8002026-03-10csaf · siemens_psirtDE

    SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • SSA-585531SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.03102026-07-14csaf · siemens_psirtDE

    SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

  • WID-SEC-W-2025-2166OpenSSL und LibreSSL: Mehrere SchwachstellenDeutsch2025-09-30csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL und LibreSSL ausnutzen, um potentiell beliebigen Code auszuführen, einen Denial of Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.

  • WID-SEC-W-2026-0647SAP Patchday März 2026: Mehrere SchwachstellenDeutsch2026-03-09csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

  • openSUSE-SU-2026:10237-1libopenssl-3-devel-3.5.3-2.1 on GA media2026-02-23csaf · suse_csafDE

    libopenssl-3-devel-3.5.3-2.1 on GA media

  • ICSA-25-162-05Siemens SIMATIC S7-1500 CPU family2025-06-10icsa · cisa_csaf_otUS

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.

  • ICSA-26-043-06Siemens SINEC OS2026-01-28icsa · cisa_csaf_otUS

    SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

  • ICSA-26-071-03Siemens SIDIS Prime2026-03-10icsa · cisa_csaf_otUS

    SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • ICSA-26-134-10Siemens SIMATIC2026-05-12icsa · cisa_csaf_otUS

    SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

  • ICSA-26-188-05Siemens SINEC OS2026-06-02icsa · cisa_csaf_otUS

    SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.

  • ICSA-26-202-04Siemens SIDIS Secured SmartPlug2026-07-14icsa · cisa_csaf_otUS

    SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

  • CERTFR-2026-AVI-1351Multiples vulnérabilités dans Oracle MySQLFrançais2026-10-21vendor · certfrFR
07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundncsc_nlsiemens_psirtsuse_csafcisa_csaf_otcertfrNVDCVE.orgMITRE
veröffentlicht 2025-09-30geändert 2026-07-14
09

Referenzen (28)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan