CVE-2020-27827

CVE-2020-27827 concerns Open vSwitch where specially crafted LLDP packets can trigger memory allocation issues during handling of optional TLVs, leading to a denial of service and impacting availability. The connected documents provide various advisories (e.g., AlmaLinux, Gentoo GLSA) that refere...

CVE-2022-30694

Summary: CVE-2022-30694 is a CSRF vulnerability in the Siemens web server login endpoint "/FormLogin" that can allow an authenticated attacker to track other users’ activities by bypassing origin checks. The issue affects multiple Siemens products including SIMATIC Drive Controllers, SIMATIC ET 2...

CVE-2023-46156

CVE-2023-46156 affects Siemens SINUMERIK MC/ONE and a broad range of SIMATIC S7-1500 CPU family devices, where port 102/tcp handling of specially crafted packets can trigger a denial-of-service. The vulnerability is described as a Use-After-Free (CWE-416) condition with a CVSS v3 base score of 7....

CVE-2020-8745

CVE-2020-8745 is a vulnerability in Intel CSME/TXE subsystems with insufficient control flow management in the subsystem, affecting Intel CSME/AMT/SPS firmware before specific versions (e.g., 11.8.x/11.12.x/11.22.x/12.0.x/13.0.x/14.x branches and TXE before 3.1.80 and 4.0.30). The issue could all...

CVE-2022-24408

CVE-2022-24408 affects Siemens SINUMERIK MC (all versions prior to v1.15 SP1) and SINUMERIK ONE (all versions prior to v6.15 SP1). The issue is due to the sc SUID binary, which exposes commands that can be used to execute system commands or modify files; this leads to improper privilege managemen...