CVE-2021-3449

CVE-2021-3449 affects OpenSSL 1.1.1.x where a TLSv1.2 server may crash (DoS) if it receives a renegotiation ClientHello that omits the signature_algorithms extension but includes signature_algorithms_cert. The issue is a NULL pointer dereference leading to a denial of service; OpenSSL clients are...

CVE-2017-2684

CVE-2017-2684 describes an authentication bypass in Siemens SIMATIC Logon. An attacker with knowledge of a valid user name and physical or network access could bypass the application‑level authentication. Affected are SIMATIC Logon versions prior to V1.5 SP3 Update 2, and related products using S...

CVE-2017-9938

Siemens SIMATIC Logon (pre-1.6) is vulnerable to an Out-of-Bounds Write (CWE-787) via specially crafted packets to the Remote Access service on TCP 16389, causing a Denial-of-Service (the service restarts automatically). Affected: SIMATIC Logon, all versions prior to V1.6. Impact: DoS with availa...