CVE-2023-50495

mediumpriority · track · 26EPSS 0.010 · 64 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.04% (64th) EPSS

CVSS 6.5 · medium

Is it mine?

27 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
FixedSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Only build and run applications from trusted sources
WorkaroundSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Only build and run applications from trusted sources

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USCWE-20USCWE-20US

affected products (27)

Products and version ranges known to be affected.

Dell PowerProtect Data Domainall versionscert_bundDEcpe:/a:dell:powerprotect_data_domain:-
Dell PowerProtect Data Domain <7.10.1.40all versionscert_bundDE
Dell PowerProtect Data Domain <7.13.1.10all versionscert_bundDE
Dell PowerProtect Data Domain <7.7.5.50all versionscert_bundDE
Dell PowerProtect Data Domain <8.1.0.0all versionscert_bundDE
Dell PowerProtect Data Domain Management Centerall versionscert_bundDEcpe:/a:dell:powerprotect_data_domain_management_center:-
Dell PowerProtect Data Domain OSall versionscert_bundDEcpe:/o:dell:powerprotect_data_domain_os:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Dell PowerProtect Data Domain< 7.10.1.40cert_bundDE
Dell PowerProtect Data Domain< 7.13.1.10cert_bundDE
Dell PowerProtect Data Domain< 7.7.5.50cert_bundDE
Dell PowerProtect Data Domain< 8.1.0.0cert_bundDE
SIMATIC S7-1500 TM MFP - GNU/Linux subsystemall versionscisa_csaf_otUS
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
Canonical Ltd. Ubuntu≤ 14.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 22.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 20.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 18.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 16.04 LTSfstec_bduRU

showing 20 of 27

advisories (4)

Vendor and ecosystem advisories describing this.

SSA-794697SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.12023-06-13csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).
WID-SEC-W-2024-0165NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-01-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2024-3377Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2024-11-07csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und um nicht näher beschriebene Auswirkungen zu erzielen.
ICSA-23-166-11Siemens SIMATIC S7-1500 TM MFP Linux Kernel2023-06-13icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 ( https://cert-portal.siemens.com/productcert/html/ssa-265688.html).

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2023-12-12modified 2026-10-15

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan