Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49966)

ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-46685)

pinctrl: single: fix NULL dereference in pcsgetfunction. pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42153)

i2c: pnx: potential deadlock warning from deltimersync call in isr. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504657; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Initialization (CVE-2024-50193)

x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't...

Siemens SCALANCE and RUGGEDCOM Devices Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CVE-2024-40902)

jfs: xattr: buffer overflow for invalid xattr. When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer. This plugi...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46740)

binder: UAF caused by offsets overwrite. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504456; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56659)

net: lapb: It is unclear if net/lapb code is supposed to be ready for 8021q, this may lead to crashes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50295)

net: arc: A warning is shown because ndev-dev and pdev-dev are not the same device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504563;...

Siemens APOGEE PXC and TALON TC Series Expected Behavior Violation (CVE-2025-40555)

Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-53145)

um: potential integer overflow during physmem setup. This vulnerability happens when the real map size is greater than LONGMAX, which can be easily triggered on UML/i386. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56574)

media: ts2020: null-ptr-deref in ts2020probe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504729; scriptversion"1.4";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53146)

NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the length + 4 addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res does not have to perform arithmetic on the unsafe length value. This...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56598)

jfs: array-index-out-of-bounds fix in dtReadFirst. The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49875)

nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-40943)

ocfs2: fix races between hole punching and AIO+DIO. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504517; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50179)

ceph: incorrect Fw reference check when dirtying pages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504801; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56633)

tcpbpf: The current sk memory accounting logic in SKREDIRECT is pre-uncharging tosend bytes, which is either msg-sg.size or a smaller value applybytes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49963)

mailbox: bcm2835: timeout during suspend mode. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504800; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56700)

media: wl128x: Atomicity violation occurs when the fmcsendcmd function is executed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504519;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56720)

bpf, sockmap: Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, it should putpage 2. if len == 0, returning early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix for the value of variable a 5. In skmsgshiftleft, after shifting, it has already pointed to the ne...