Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Divide By Zero (CVE-2024-49892)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytesperelementy & bytesperelementc are initialized by getbytesperelement whic...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38615)

cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-58058)

ubifs: skip dumping tnc tree when zroot is null This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503392; scriptversion"1.3";...

Siemens SIMATIC Devices Buffer Overflow (CVE-2024-35935)

btrfs: send: handle path ref underflow in header iterateinoderef This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503528; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Check for Unusual or Exceptional Conditions (CVE-2024-25739)

createemptylvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi-lebsize. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

Siemens SIMATIC Devices Use After Free (CVE-2025-21753)

btrfs: fix use-after-free when attempting to join an aborted transaction This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503682; scriptversion"1.2...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35893)

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structure...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-42304)

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Validation of Array Index (CVE-2024-49894)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in cmhelpertranslatecurvetodegammahwformat function. The issue could occur when the index 'i' exceeds the number of...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-36270)

netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-46865)

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-47735)

RDMA/hns: missuse of spinlockirq/spinunlockirq when spinlockirqsave/spinlockirqrestore was hold. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SIMATIC Devices Use After Free (CVE-2024-57979)

pps: Fix a use-after-free This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503612; scriptversion"1.3";...

Siemens SINEC OS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2025-40803)

The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-35896)

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 bpf: Try to avoid kzalloc in cgroup/s,getsockopt setsockopt @optlen argument should be tak...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-57981)

usb: xhci: NULL pointer dereference on certain command aborts. If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is later aborted, when the abort completion is handled the dequeue pointer is...

Brother HL Printers Cross-site Scripting (CVE-2018-11581)

Cross-site scripting XSS vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-26982)

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21762)

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Brother Printers NULL Pointer Dereference (CVE-2023-29984)

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of- service DoS condition. As for the affected products/models/versions, see the detaile...