Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38733 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:35:31.486Z Vendors: n/a Products: OnCommand Insight Problem Types: Authentication Bypas Description: OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/NTAP-20221220-0001/
CVE ID: CVE-2022-38734 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T17:31:03.400Z Vendors: n/a Products: Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) Problem Types: Denial of Service Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to to a crash of the Local Distribution Router (LDR) service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20230228-0001/
CVE ID: CVE-2022-38735 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38736 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38737 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38738 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38739 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38740 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38741 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-38742 State: PUBLISHED Published: 2022-09-23T15:24:18.224Z Last Updated: 2025-05-22T18:22:27.480Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: ThinManager ThinServer Problem Types: CWE-122 Description: Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
expose the server to arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136847
CVE ID: CVE-2022-38743 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T14:09:08.572Z Vendors: n/a Products: FactoryTalk VantagePoint Problem Types: CWE-284 Description: Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. If successfully exploited, this could allow the attacker to execute arbitrary code and gain access to restricted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
nd gain access to restricted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137043
CVE ID: CVE-2022-38744 State: PUBLISHED Published: 2022-10-27T13:25:17.957Z Last Updated: 2025-05-05T15:38:28.146Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk Alarm and Events Server Problem Types: CWE-287 Description: An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomat
h XML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136876
CVE ID: CVE-2022-38745 State: PUBLISHED Published: 2023-03-24T15:56:48.549Z Last Updated: 2025-02-13T14:38:34.784Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: CWE-94, CWE-1188, CWE-427 Description: Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/q3noq7m681kvtb29m28x74q8cnwnzzo0 - https://www.openoffice.org/security/cves/CVE-2022-38745.html
CVE ID: CVE-2022-38749 State: PUBLISHED Published: 2022-09-05T00:00:00 Last Updated: 2024-08-03T11:02:14.586Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: snakeyaml Products: SnakeYAML Problem Types: CWE-121 Description: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024 - https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-
/oss-fuzz/issues/detail?id=47024 - https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open - https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html - https://security.gentoo.org/glsa/202305-28 - https://security.netapp.com/advisory/ntap-20240315-0010/
CVE ID: CVE-2022-38750 State: PUBLISHED Published: 2022-09-05T00:00:00 Last Updated: 2024-11-20T14:57:41.651Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: snakeyaml Products: SnakeYAML Problem Types: CWE-121 Description: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027 - https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackov
tps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027 - https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027 - https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html - https://security.gentoo.org/glsa/202305-28 - https://security.netapp.com/advisory/ntap-20240315-0010/
CVE ID: CVE-2022-38751 State: PUBLISHED Published: 2022-09-05T00:00:00.000Z Last Updated: 2025-04-21T13:50:22.367Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: snakeyaml Products: SnakeYAML Problem Types: CWE-121 Description: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039 - https://bitbucket.org/snakeyaml/snakeyaml/issues/530/st
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039 - https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039 - https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html - https://security.gentoo.org/glsa/202305-28 - https://security.netapp.com/advisory/ntap-20240315-0010/
CVE ID: CVE-2022-38752 State: PUBLISHED Published: 2022-09-05T00:00:00 Last Updated: 2024-08-03T11:02:14.529Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: snakeyaml Products: SnakeYAML Problem Types: CWE-121 Description: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081 - https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stacko
ttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081 - https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081 - https://security.gentoo.org/glsa/202305-28 - https://security.netapp.com/advisory/ntap-20240315-0009/
CVE ID: CVE-2022-38753 State: PUBLISHED Published: 2022-11-28T00:00:00.000Z Last Updated: 2025-04-25T20:21:27.518Z Vendors: n/a Products: NetIQ Advanced Authentication Problem Types: MFA Factor Authentication bypass Description: This update resolves a multi-factor authentication bypass attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-641/data/advanced-authentication-releasenotes-641.html#t4g4mvd1yivo
CVE ID: CVE-2022-38754 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:49:04.142Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Micro Focus Operations Bridge Manager, Micro Focus Operations Bridge- Containerized Problem Types: CWE-79 Description: A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deploy
nother OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000012517?language=en_US - htt
ntainer: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000012517?language=en_US - https://portal.microfocus.com/s/article/KM000012518?language=en_US - https://marketplace.microfocus.com/itom/content/operations-bridge-manager-obm-2022-05-hotfixes
CVE ID: CVE-2022-38755 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T20:32:05.723Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Micro Focus Products: Micro Focus Filr Problem Types: Remote unauthenticated user enumeration Description: A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prior to 4.3.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
us Filr versions prior to 4.3.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000011886?language=en_US
CVE ID: CVE-2022-38756 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:22:18.809Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Micro Focus Products: Micro Focus GroupWise Web Problem Types: A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies. Description: A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent t
n Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000012374?language=en_US - http://packetstormsecurity.com/files/170768/Micro-Focus-GroupWise-Session-ID-Disclosure.html - http://seclists.org/fulldisclosure/2023/Jan/28
CVE ID: CVE-2022-38757 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:22:56.731Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: ZENworks Configuration Management (ZCM), ZENworks Asset Management, ZENworks Endpoint Security Management (ZESM), ZENworks Patch Management (ZPM) Problem Types: CWE-269 Description: A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but
a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000012895?language=en_US - https://kmviewer.saas.microfocus.com/#/PH_206719 - https://kmviewer.saas.microfocus.com/#/PH_206720
CVE ID: CVE-2022-38758 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-03-27T20:15:28.363Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L) Vendors: Micro Focus Products: NetIQ iManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releaseno
hment: References: - https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releasenotes.html
CVE ID: CVE-2022-38764 State: PUBLISHED Published: 2022-09-19T18:01:00 Last Updated: 2024-08-03T11:02:14.601Z Vendors: Trend Micro Products: Trend Micro HouseCall (Consumer) Problem Types: Incorrect Permissions Assignment Description: A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-11092 - https://www.zerodayinitiative.com/advisories/ZDI-22-1178/
CVE ID: CVE-2022-38765 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-23T15:48:17.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vitalimages.com/customer-success-support-program/vital-images-software-security-updates/
CVE ID: CVE-2022-38766 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T15:37:10.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766
CVE ID: CVE-2022-38767 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T18:44:18.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://windriver.com - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2022-38767
CVE ID: CVE-2022-38768 State: PUBLISHED Published: 2022-09-13T22:11:58 Last Updated: 2024-08-03T11:02:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization. Additional Analyst Notes: - CVE Program Container: References: - https://transtek.com/mojodat-fixed-assets/ - https://mojodat-vulnerabilities.netlify.app/
CVE ID: CVE-2022-38769 State: PUBLISHED Published: 2022-09-13T22:12:06 Last Updated: 2024-08-03T11:02:14.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request. Additional Analyst Notes: - CVE Program Container: References: - https://transtek.com/mojodat-fixed-assets/ - https://mojodat-vulnerabilities.netlify.app/
CVE ID: CVE-2022-38770 State: PUBLISHED Published: 2022-09-13T22:12:11 Last Updated: 2024-08-03T11:02:14.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a successful login request. Additional Analyst Notes: - CVE Program Container: References: - https://transtek.com/mojodat-fixed-assets/ - https://mojodat-vulnerabilities.netlify.app/
CVE ID: CVE-2022-38771 State: PUBLISHED Published: 2022-09-13T22:12:18 Last Updated: 2024-08-03T11:02:14.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request. Additional Analyst Notes: - CVE Program Container: References: - https://transtek.com/mojodat-fixed-assets/ - https://mojodat-vulnerabilities.netlify.app/
CVE ID: CVE-2022-38772 State: PUBLISHED Published: 2022-08-29T20:21:57 Last Updated: 2024-08-03T11:02:14.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature. Additional Analyst Notes: - CVE Program Container: References: - https://manageengine.com - https://www.manageengine.com/itom/advisory/cve-2022-38772.html
CVE ID: CVE-2022-38773 State: PUBLISHED Published: 2023-01-10T11:39:37.547Z Last Updated: 2025-04-03T15:37:09.647Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C) Vendors: Siemens Products: SIMATIC Drive Controller CPU 1504D TF, SIMATIC Drive Controller CPU 1507D TF, SIMATIC S7-1500 CPU 1510SP F-1 PN, SIMATIC S7-1500 CPU 1510SP-1 PN, SIMATIC S7-1500 CPU 1511-1 PN, SIMATIC S7-1500 CPU 1511C-1 PN, SIMATIC S7-1500 CPU 1511F-1 PN, SIMATIC S7-1500 CPU 1511T-1 PN, SIMATIC S7-1500 CPU 1511TF-1 PN, SIMATIC S7-1500 CPU 1512C-1 PN, SIMATIC S7-1500 CPU 1512SP F-1 PN, SIMATIC S7-1500 CPU 1512SP-1 PN, SIMATIC S7-1500 CPU 1513-1 PN, SIMATIC S7-1500 CPU 1513F-1 PN, SI
00 CPU 1512SP F-1 PN, SIMATIC S7-1500 CPU 1512SP-1 PN, SIMATIC S7-1500 CPU 1513-1 PN, SIMATIC S7-1500 CPU 1513F-1 PN, SIMATIC S7-1500 CPU 1513R-1 PN, SIMATIC S7-1500 CPU 1515-2 PN, SIMATIC S7-1500 CPU 1515F-2 PN, SIMATIC S7-1500 CPU 1515R-2 PN, SIMATIC S7-1500 CPU 1515T-2 PN, SIMATIC S7-1500 CPU 1515TF-2 PN, SIMATIC S7-1500 CPU 1516-3 PN/DP, SIMATIC S7-1500 CPU 1516F-3 PN/DP, SIMATIC S7-1500 CPU 1516T-3 PN/DP, SIMATIC S7-1500 CPU 1516TF-3 PN/DP, SIMATIC S7-1500 CPU 1517-3 PN/DP, SIMATIC S7-1500 CPU 1517F-3 PN/DP, SIMATIC S7-1500 CPU 1517H-3 PN, SIMATIC S7-1500 CPU 1517T-3 PN/DP, SIMATIC S7-1500 CPU 1517TF-3 PN/DP, SIMATIC S7-1500 CPU 1518-4 PN/DP, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATI
N/DP, SIMATIC S7-1500 CPU 1517TF-3 PN/DP, SIMATIC S7-1500 CPU 1518-4 PN/DP, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518HF-4 PN, SIMATIC S7-1500 CPU 1518T-4 PN/DP, SIMATIC S7-1500 CPU 1518TF-4 PN/DP, SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK, SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK, SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN, SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN, SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN, SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN, SIPLUS ET 200SP CPU 1510SP F-1 PN, SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL, SIPLUS ET 200SP CPU 1510SP-1 PN, SIPLUS ET 200SP CPU 1510SP-1 PN R
510SP F-1 PN, SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL, SIPLUS ET 200SP CPU 1510SP-1 PN, SIPLUS ET 200SP CPU 1510SP-1 PN RAIL, SIPLUS ET 200SP CPU 1512SP F-1 PN, SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL, SIPLUS ET 200SP CPU 1512SP-1 PN, SIPLUS ET 200SP CPU 1512SP-1 PN RAIL, SIPLUS S7-1500 CPU 1511-1 PN, SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL, SIPLUS S7-1500 CPU 1511-1 PN TX RAIL, SIPLUS S7-1500 CPU 1511F-1 PN, SIPLUS S7-1500 CPU 1513-1 PN, SIPLUS S7-1500 CPU 1513F-1 PN, SIPLUS S7-1500 CPU 1515F-2 PN, SIPLUS S7-1500 CPU 1515F-2 PN RAIL, SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL, SIPLUS S7-1500 CPU 1515R-2 PN, SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL, SIPLUS S7-1500 CPU 1516-3 PN/DP, SIPLUS S7-1500 CPU 151
S S7-1500 CPU 1515R-2 PN, SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL, SIPLUS S7-1500 CPU 1516-3 PN/DP, SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL, SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL, SIPLUS S7-1500 CPU 1516F-3 PN/DP, SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL, SIPLUS S7-1500 CPU 1517H-3 PN, SIPLUS S7-1500 CPU 1518-4 PN/DP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518F-4 PN/DP, SIPLUS S7-1500 CPU 1518HF-4 PN Problem Types: CWE-1326 Description: Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the