Vulnerabilities fixed in Siemens products

🗓️ 11 May 2021 00:00:00Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 11 Views

Siemens fixed vulnerabilities enabling DoS, remote code execution, spoofing and privilege escalation.

Reporter	Title	Published	Views	Family All 1585
IBM Security Bulletins	Security Bulletin: IBM API Connect V5 is vulnerable to denial of service (CVE-2019-11479)	9 Nov 202020:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability (CVE-2020-25705, CVE-2020-28374)	4 Nov 202115:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by TCP denial of service vulnarabilities	5 Nov 201922:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway is affected by Denial of Service vulnerabilities	8 Jun 202121:47	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	19 May 202109:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in the Linux kernel affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak System addressed vulnerabilities (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)	31 Dec 202015:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)	7 Oct 201906:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Docker, Python, and NGINX affect IBM Spectrum Protect Plus	10 Dec 202118:57	–	ibm

11 May 2021 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

CVSS 27.8

CVSS 37.5

EPSS0.98745

denial of service remote code execution spoofing privilege escalation