CVE-2023-5678

mediumpriority · track · 23EPSS 0.045 · 91 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

4.46% (91st) EPSS

CVSS 5.3 · medium

Is it mine?

353 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the "-pubcheck" option, as well as the OpenSSL genpkey command line application. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC RTLS Locating Manager (6GT2780-0DA00)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA10)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA20)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA30)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA10)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA20)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA30)siemens_psirt
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSINEC NMSsiemens_psirt
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/
FixedSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Update to V1.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
FixedSIDIS Primesiemens_psirt
Update to V4.0.700 or later version
FixedSINEC NMSsiemens_psirt
Update to V3.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974917/
FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)siemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/
FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedTeleControl Server Basic V3siemens_psirt
Update to V3.1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955177/
FixedSCALANCE WAB762-1 (6GK5762-1AJ00-6AA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (6GK5763-1AL00-7DA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (6GK5766-1GE00-7DA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUB762-1 (6GK5762-1AJ00-1AA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (6GK5763-1AL00-3AA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (6GK5763-1AL00-3DA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (6GK5766-1GE00-3DA0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0)siemens_psirt
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
FixedSINEC INSsiemens_psirt
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/
FixedSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Update to V3.1.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/
FixedSINEC NMScisa_csaf_ot
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA00)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA10)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA20)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-0DA30)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA10)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA20)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedSIMATIC RTLS Locating Manager (6GT2780-1EA30)cisa_csaf_ot
Update to V3.0.1.1 or later version The update is available from Siemens Online Software Delivery (OSD).
FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)cisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/
FixedSINEC NMScisa_csaf_ot
Update to V3.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974917/
FixedSINEC INScisa_csaf_ot
Update to V1.0 SP2 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975745/
FixedSCALANCE WAB762-1 (6GK5762-1AJ00-6AA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (6GK5763-1AL00-7DA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (6GK5766-1GE00-7DA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUB762-1 (6GK5762-1AJ00-1AA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (6GK5763-1AL00-3AA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (6GK5763-1AL00-3DA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (6GK5766-1GE00-3DA0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0)cisa_csaf_ot
Update to V3.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977720/
FixedSIDIS Primecisa_csaf_ot
Update to V4.0.700 or later version
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA00)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA10)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA20)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA30)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA10)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA20)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA30)siemens_psirt
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Only build and run applications from trusted sources
MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Only build and run applications from trusted sources.
MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA00)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA10)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA20)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-0DA30)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA10)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA20)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
MitigationSIMATIC RTLS Locating Manager (6GT2780-1EA30)cisa_csaf_ot
Apply security hardening of the Windows Server, where the RTLS Locating Manager is installed on, in accordance with your corporate security policies or up-to-date hardening guidelines
WorkaroundSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Only build and run applications from trusted sources
No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Currently no fix is available

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.9–7.5

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lprimary · NVD / NIST USexploitability 3.9 · impact 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · CISA US

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondaryexploitability 3.9 · impact 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · Siemens ProductCERT DE

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-754USprimaryCWE-325USCWE-606USCWE-606USCWE-606USCWE-754USCWE-754USCWE-754USCWE-754US

affected products (353)

Products and version ranges known to be affected.

IBM InfoSphere Information Serverall versionscert_bundDEcpe:/a:ibm:infosphere_information_server:-
Oracle Communications 12.11all versionscert_bundDEcpe:/a:oracle:communications:12.11
Oracle Communications 14.0all versionscert_bundDEcpe:/a:oracle:communications:14.0
Oracle Communications 15.0all versionscert_bundDEcpe:/a:oracle:communications:15.0
Oracle Communications 15.0.0.0.0all versionscert_bundDEcpe:/a:oracle:communications:15.0.0.0.0
Oracle Communications 23.4.0all versionscert_bundDEcpe:/a:oracle:communications:23.4.0
Oracle Communications 23.4.4all versionscert_bundDEcpe:/a:oracle:communications:23.4.4
Oracle Communications 24.1.0all versionscert_bundDEcpe:/a:oracle:communications:24.1.0
Oracle Communications 24.1.1all versionscert_bundDEcpe:/a:oracle:communications:24.1.1
Oracle Communications 24.2.0all versionscert_bundDEcpe:/a:oracle:communications:24.2.0
Oracle Communications 24.2.1all versionscert_bundDEcpe:/a:oracle:communications:24.2.1
Oracle Communications 24.2.3all versionscert_bundDEcpe:/a:oracle:communications:24.2.3
Oracle Communications 24.3.0all versionscert_bundDEcpe:/a:oracle:communications:24.3.0
Oracle Communications 4.1.0all versionscert_bundDEcpe:/a:oracle:communications:4.1.0
Oracle Communications 4.2.0all versionscert_bundDEcpe:/a:oracle:communications:4.2.0
Oracle Communications 47.0.0.0.0all versionscert_bundDEcpe:/a:oracle:communications:47.0.0.0.0
Oracle Communications 5.1all versionscert_bundDEcpe:/a:oracle:communications:5.1
Oracle Communications 5.2all versionscert_bundDEcpe:/a:oracle:communications:5.2
Oracle Communications 8.0all versionscert_bundDEcpe:/a:oracle:communications:8.0
Oracle Communications 8.1all versionscert_bundDEcpe:/a:oracle:communications:8.1

showing 20 of 353

advisories (42)

Vendor and ecosystem advisories describing this.

NCSC-2024-0246Kwetsbaarheden verholpen in Siemens productenNL2024-06-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten, zoals SCALANCE, SICAM, Tecnomatix, SITOP en PowerSys.
NCSC-2024-0305Kwetsbaarheden verholpen in Oracle Siebel CRMNL2024-07-17csaf · ncsc_nlNL
Er zijn kwetsbaarheden verholpen in Oracle Siebel CRM.
NCSC-2024-0418Kwetsbaarheden verholpen in Oracle AnalyticsNL2024-10-17csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in Analytics producten.
NCSC-2024-0433Kwetsbaarheden verholpen in Siemens productenNL2024-11-12csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.
NCSC-2025-0021Kwetsbaarheden verholpen in Oracle CommunicationsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communicatieproducten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function en Oracle Communications Order and Service Management.
NCSC-2025-0026Kwetsbaarheden verholpen in Oracle JD EdwardsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in JD Edwards EnterpriseOne Tools (specifiek voor versies prior tot 9.2.9.2).
NCSC-2025-0061Kwetsbaarheden verholpen in Siemens productenNL2025-02-14csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als APOGEE, Opcenter, RUGGEDCOM, SCALANCE, SIMATIC, SIPROTEC en Teamcenter.
NCSC-2025-0106Kwetsbaarheden verholpen in Siemens productenNL2025-04-08csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Industrial Edge Devices, Mendix, SENTRON, SIDIS, SIMATIC, SIPLUS,Insights Hub Private Cloud, Siemens License Server en Solid Edge.
SSA-093430SSA-093430: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V3.02024-05-14csaf · siemens_psirtDE
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
SSA-128433SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP22024-04-09csaf · siemens_psirtDE
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
SSA-265688SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.12024-04-09csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 TM MFP V1.1 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V1.1 only; for version V1.1.1 refer to SSA-784472.
SSA-277137SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.7002025-04-08csaf · siemens_psirtDE
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
SSA-331112SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP12024-11-12csaf · siemens_psirtDE
SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
SSA-341067SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.12024-06-11csaf · siemens_psirtDE
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
SSA-398330SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.52023-12-12csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 are no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
SSA-556635SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.02024-04-09csaf · siemens_psirtDE
Siemens has released a new version for Telecontrol Server Basic that fixes multiple vulnerabilities.
SSA-613116SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.12025-08-12csaf · siemens_psirtDE
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-769027SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.02025-02-11csaf · siemens_psirtDE
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-794697SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.12023-06-13csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).
SSA-915275SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 32024-11-12csaf · siemens_psirtDE
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
WID-SEC-W-2023-2838OpenSSL: Schwachstelle ermöglicht Denial of ServiceDeutsch2023-11-06csaf · cert_bundDE
Ein Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2024-0769IBM Rational Build Forge: Mehrere SchwachstellenDeutsch2024-04-02csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Rational Build Forge ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
WID-SEC-W-2024-1226Red Hat OpenShift: Mehrere SchwachstellenDeutsch2024-05-22csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder um weitere nicht spezifizierte Angriffe auszuführen.
WID-SEC-W-2024-1307Red Hat OpenShift Service Mesh Containers: Mehrere SchwachstellenDeutsch2024-06-06csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh Containers ausnutzen, um Dateien zu manipulieren, einen 'Denial of Service'-Zustand erzuegen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuführen.
WID-SEC-W-2024-1488IBM InfoSphere Information Server: Mehrere SchwachstellenDeutsch2024-06-30csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen offenzulegen.
WID-SEC-W-2024-1653Oracle Siebel CRM: Mehrere SchwachstellenDeutsch2024-07-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2024-2100IBM Power Hardware Management Console: Mehrere SchwachstellenDeutsch2024-09-10csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM Power Hardware Management Console ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen preiszugeben.
WID-SEC-W-2024-2112Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-09-10csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2024-3377Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2024-11-07csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen und um nicht näher beschriebene Auswirkungen zu erzielen.
WID-SEC-W-2025-0148Oracle Communications: Mehrere SchwachstellenDeutsch2025-01-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2025-1854HCL BigFix Komponente: Mehrere SchwachstellenDeutsch2025-08-17csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.
ICSA-23-166-11Siemens SIMATIC S7-1500 TM MFP Linux Kernel2023-06-13icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 ( https://cert-portal.siemens.com/productcert/html/ssa-265688.html).
ICSA-23-348-10Siemens SIMATIC S7-15002023-12-12icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 ( https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
ICSA-24-102-01Siemens SIMATIC S7-1500 TM MFP2024-04-09icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-24-102-07Siemens SINEC NMS2024-04-09icsa · cisa_csaf_otUS
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
ICSA-24-137-07Siemens SIMATIC RTLS Locating Manager2024-05-14icsa · cisa_csaf_otUS
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
ICSA-24-165-04Siemens ST7 ScadaConnect2024-06-11icsa · cisa_csaf_otUS
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
ICSA-24-319-04Siemens SINEC NMS2024-11-12icsa · cisa_csaf_otUS
SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.
ICSA-24-319-08Siemens SINEC INS2024-11-12icsa · cisa_csaf_otUS
SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
ICSA-25-044-09Siemens SCALANCE W700 IEEE 802.11ax2025-02-11icsa · cisa_csaf_otUS
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-25-100-02Siemens SIDIS Prime2025-04-08icsa · cisa_csaf_otUS
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
ICSA-25-226-15Siemens SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl siemens_psirt cisa_csaf_ot NVD CVE.org MITRE

published 2023-11-06modified 2026-10-14

related (780)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-39682US	critical9.8OT critical	2.88% (87th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2024-3393US	high7.5OT critical	29.1% (98th)	KEV	2024-12-27
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data p…
CVE-2023-41993US	high8.8OT critical	24.3% (98th)	KEV	2023-09-21
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that t…
CVE-2023-41992US	high7.8OT critical	9.52% (95th)	KEV	2023-09-21
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate thei…
CVE-2021-3560US	high7.8OT critical	23.7% (98th)	KEV	2022-02-16
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be us…

+775 more

references (43)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan