CVE-2015-8011

mediumpriority · track · 41EPSS 0.055 · 93 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

5.47% (93rd) EPSS

CVSS 6.8 · medium

Is it mine?

103 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixednetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixednetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixednetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-0:2.13.0-72.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-devel-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-devel-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-devel-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedopenvswitch2.13-test-0:2.13.0-72.el8fdp.noarch as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
Fixedpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5615
FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)siemens_psirt
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)siemens_psirt
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)siemens_psirt
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/
FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)siemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/
FixedSIMATIC HMI Unified Comfort Panelssiemens_psirt
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530
FixedSINUMERIK ONE MCPsiemens_psirt
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)siemens_psirt
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/
FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)siemens_psirt
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)siemens_psirt
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)siemens_psirt
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)siemens_psirt
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
FixedSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)cisa_csaf_ot
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)cisa_csaf_ot
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)cisa_csaf_ot
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/
FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)cisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/
FixedSIMATIC HMI Unified Comfort Panelscisa_csaf_ot
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530
FixedSINUMERIK ONE MCPcisa_csaf_ot
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/
FixedSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)cisa_csaf_ot
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/
FixedSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)cisa_csaf_ot
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)cisa_csaf_ot
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
FixedSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)cisa_csaf_ot
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
FixedTIM 1531 IRC (6GK7543-1MX00-0XE0)cisa_csaf_ot
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC HMI Unified Comfort Panelssiemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSINUMERIK ONE MCPsiemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)siemens_psirt
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIMATIC HMI Unified Comfort Panelscisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSINUMERIK ONE MCPcisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)cisa_csaf_ot
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
Workaroundnetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundnetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundnetwork-scripts-openvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el7.src as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el8.src as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-0:4.6.0-202012121455.p0.git.3800.80a13a6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-redistributable-0:4.6.0-202012121455.p0.git.3800.80a13a6.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenshift-clients-redistributable-0:4.6.0-202012121455.p0.git.3800.80a13a6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-0:2.13.0-72.el8fdp.src as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-debugsource-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-devel-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-devel-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-devel-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundopenvswitch2.13-test-0:2.13.0-72.el8fdp.noarch as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython-sushy-0:3.5.0-2.20201005161238.74b8111.el8.src as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-openvswitch2.13-debuginfo-0:2.13.0-72.el8fdp.x86_64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-sushy-0:3.5.0-2.20201005161238.74b8111.el8.noarch as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.
Workaroundpython3-sushy-tests-0:3.5.0-2.20201005161238.74b8111.el8.noarch as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
When the lldpd source is compiled with source fortification enabled, the flaw becomes unexploitable and will just cause a crash.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–9.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-120USprimaryCWE-120USCWE-120USCWE-120USCWE-120US

affected products (103)

Products and version ranges known to be affected.

SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)all versionscisa_csaf_otUS
SIMATIC HMI Unified Comfort Panelsall versionscisa_csaf_otUS
SINUMERIK ONE MCPall versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)all versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)all versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)all versionscisa_csaf_otUS
SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)all versionscisa_csaf_otUS
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)all versionscisa_csaf_otUS
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)all versionscisa_csaf_otUS
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)all versionscisa_csaf_otUS
TIM 1531 IRC (6GK7543-1MX00-0XE0)all versionscisa_csaf_otUS
Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)< V3.3.46cisa_csaf_otUS
Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)< V3.3.46cisa_csaf_otUS
Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)< V2.2.28cisa_csaf_otUS

showing 20 of 103

advisories (3)

Vendor and ecosystem advisories describing this.

RHSA-2020:5615Red Hat Security Advisory: OpenShift Container Platform 4.6.9 packages and security update2020-12-21csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.6.9 is now available with updates to packages and images that fix several bugs. This release includes a security update for openshift-clients, openvswitch2.13, and python-sushy, which are now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
SSA-941426SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products2021-07-13csaf · siemens_psirtDE
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-21-194-07Siemens Industrial Products LLDP (Update D)2021-07-13icsa · cisa_csaf_otUS
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot redhat_csaf siemens_psirt NVD CVE.org MITRE

published 2020-01-28modified 2026-06-17

related (5,668)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-43520US	medium5.5OT critical	0.43% (37th)	KEV	2025-12-12
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So…
CVE-2025-20333US	—OT critical	71.2% (99th)	KEV	2025-09-25
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut…
CVE-2025-39682US	critical9.8OT critical	3.25% (88th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2025-31277US	—OT critical	1.66% (77th)	KEV	2025-07-30
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc…
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	2025-03-11
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

+5663 more

references (51)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan