Siemens SIMATIC S7-1500 TM MFP Linux Kernel

🗓️ 13 Jun 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 63 Views

Siemens SIMATIC S7-1500 TM MFP Linux Kernel with multiple vulnerabilities including uncontrolled resource consumption, improper access control, out-of-bounds write, and incomplete cleanup, with potential for denial-of-service, arbitrary code execution, and sensitive information exposure

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Rational ClearCase (CVE-2022-1292, CVE-2022-0778)	25 Jul 202214:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	26 Mar 202503:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2022-0778, CVE-2022-1292)	26 Jul 202212:02	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of OpenSSL, IBM Virtualization Engine TS7700 is vulnerable to denial of service (CVE-2022-0778) and privilege escalation (CVE-2022-1292)	29 Aug 202223:14	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary command execution (CVE-2022-1292 and CVE-2022-2068) or an attacker may obtain sensitive information (CVE-2022-2097) due to OpenSSL	19 Aug 202216:02	–	ibm

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-794697.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-794697.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-794697.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-794697.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-166-11.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-166-11
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

13 Jun 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.2

CVSS 210

EPSS0.82612

SSVC