Siemens SCALANCE XCM332

🗓️ 11 Apr 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 35 Views

Siemens SCALANCE XCM332, CISA ICS security advisories end, CVSS v3 9.8, remote exploitable vulnerabilitie

Reporter	Title	Published	Views	Family All 1385
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Copy Data Management (CVE-2022-32206, CVE-2022-32208)	7 Oct 202218:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in cURL libcurl (CVE-2022-32208)	31 Mar 202316:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability in libcurl (CVE-2022-32206)	4 Nov 202212:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and OpenSSL may affect IBM Spectrum Copy Data Management	17 Sep 202201:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management	28 Jul 202315:32	–	ibm

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-558014.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-558014.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-558014.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-558014.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-103-09.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-103-09
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

11 Apr 2023 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 27.5

EPSS0.03367

SSVC

siemens scalance xcm332 cisa advisories cvss v3 remote exploitable denial-of-service code execution unauthorized access libtirpc linux kernel race condition busybox denial-of-service condition data injection