Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic S7 1500 Cpu 1518 4 Pn/Dp Mfp (59ff7213-9975-5afe-8d5d-e994ab73b6ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31431 not_vulnerable 2026-06-08 07:57:15.013967 crypto: algif_aead - Revert to operating out-of-place
HIGH (7.8)
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Published: 2026-04-22T08:15:10.123Z
Updated: 2026-07-15T01:09:17.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4911 not_vulnerable 2026-06-08 06:16:14.861458 Glibc: buffer overflow in ld.so leading to privilege escalation
HIGH (7.8)
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Published: 2023-10-03T17:25:08.434Z
Updated: 2026-07-14T11:59:00.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28831 not_vulnerable 2026-06-08 06:02:36.406174 Details available
HIGH (7.5)
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Published: 2023-09-12T09:32:06.153Z
Updated: 2025-11-11T20:20:09.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38773 not_vulnerable 2026-06-08 05:47:17.276137 Details available
MEDIUM (4.6)
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Published: 2023-01-10T11:39:37.547Z
Updated: 2025-04-03T15:37:09.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30694 not_vulnerable 2026-06-08 05:43:38.963563 Details available
MEDIUM (6.5)
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44695 not_vulnerable 2026-06-08 05:36:46.728667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44694 not_vulnerable 2026-06-08 05:36:46.707927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44693 not_vulnerable 2026-06-08 05:36:46.653139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42029 not_vulnerable 2026-06-08 05:35:21.683904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40365 not_vulnerable 2026-06-08 05:35:17.792268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3449 not_vulnerable 2026-06-08 05:33:52.190112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.