NULL pointer deref in signature_algorithms processing
Priority HIGH 68CWE-476Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-476.
Summary
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.63542 99th percentileScored 2026-11-07
Fix Fixed openssl-src (crates.io): 111.15.0Red Hat: 10 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j) | — | No fix listed | CNA |
| — | openssl-src (crates.io) | before 111.15.0 | 111.15.0 | Patch available | GHSA-83mx-573x-5rw9 |
- OpenSSL VendorOpenSSL Affected Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j) Fixed in — No fix listed CNA
- openssl-src (crates.io) Vendor— Affected before 111.15.0 Fixed in 111.15.0 Patch available GHSA-83mx-573x-5rw9
CPE configurations NVD · 202
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | 1.1.1 to before 1.1.1k | Vulnerable | OpenSSL |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* | 12.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* | 12.2 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* | 12.2 p2 | Vulnerable | FreeBSD |
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.1.1 to before 1.1.1k Vulnerable ·OpenSSL
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* Versions 12.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* Versions 12.2 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* Versions 12.2 p2 Vulnerable ·FreeBSD
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
Show 192 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* | before 6.0.9 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* | up to 8.13.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:* | 5.11.0 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:* | 5.11.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:* | 5.12.0 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:* | 5.12.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:* | 5.13.0 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* | 5.13.0 – 5.17.0 | Vulnerable | Tenable |
| cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | 34 | Vulnerable | Fedoraproject |
| cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:* | 8.2.19 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:* | 9.2.10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:* | 10.1.1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:* | 8.2.19 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:* | 9.2.10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:* | 10.1.1 | Vulnerable | McAfee |
| cpe:2.3:o:checkpoint:quantum_security_management_firmware:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_management_firmware:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_security_management:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:o:checkpoint:multi-domain_management_firmware:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:multi-domain_management_firmware:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:multi-domain_management:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:* | 12.6.0.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* | 13.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:* | 21.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* | 19.3.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:* | 20.3.1.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:* | 21.0.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* | before 9.2.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* | a9.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:* | up to 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* | up to 5.7.33; 8.0.15 – 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* | up to 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* | 8.57 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* | 8.58 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* | 8.59 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* | 17.7 – 17.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* | 19.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* | 20.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* | 21.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:* | before 18.1.0.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:* | 5.6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Oracle |
| cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:* | 10.2.0.0 to before 10.2.1.0-17sv | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:a:sonicwall:capture_client:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | SonicWall |
| cpe:2.3:o:sonicwall:sonicos:7.0.1.0:*:*:*:*:*:*:* | 7.0.1.0 | Vulnerable | SonicWall |
| cpe:2.3:o:siemens:ruggedcom_rcm1224_firmware:*:*:*:*:*:*:*:* | 6.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:ruggedcom_rcm1224:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* | 6.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:* | 4.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:* | 4.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* | 6.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:* | 4.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:* | 4.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:* | 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_w1700_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_w1700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* | before 4.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* | before 4.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:* | before 4.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:* | before 6.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* | before 4.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* | before 4.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:* | before 6.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:* | before 6.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:* | before 6.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr552-12_firmware:*:*:*:*:*:*:*:* | before 6.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr552-12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:*:*:*:*:*:*:*:* | 1.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cloud_connect_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:*:*:*:*:*:*:*:* | 3.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_basic_panels_2nd_generation_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_basic_panels_2nd_generation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_mv500_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_mv500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:* | 3.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* | 3.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_us_firmware:*:*:*:*:*:*:*:* | 3.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_us:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* | 3.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* | 2.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:* | 2.2 to before 3.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* | 2.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:*:*:*:*:*:*:*:* | 1.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_telecontrol_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_telecontrol:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_neo_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_neo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:* | 9.1.0.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:*:*:*:*:*:*:*:* | 2019 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_process_historian_opc_ua_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf166c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf166c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf360r_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf360r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215_fc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215_fc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_connect_300_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_connect_300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* | 2.0 to before 2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simatic_logon:*:*:*:*:*:*:*:* | 1.6.0.2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_logon:1.5:sp3_update_1:*:*:*:*:*:* | 1.5 sp3_update_1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_telecontrol:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:* | 1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:* | 1.0 sp1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec_pni:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:14.0:-:*:*:*:*:*:* | 14.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:14.0:sp1:*:*:*:*:*:* | 14.0 sp1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:14.0:sp2:*:*:*:*:*:* | 14.0 sp2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:14.0:sp2_update1:*:*:*:*:*:* | 14.0 sp2_update1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:14.0:sp2_update2:*:*:*:*:*:* | 14.0 sp2_update2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* | before 1.0.1.1 | Vulnerable | Siemens |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 10.0.0 – 10.12.0 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* | 10.13.0 – 10.24.0 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 12.0.0 – 12.12.0 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* | 12.13.0 to before 12.22.1 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 14.0.0 – 14.14.0 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* | 14.15.0 to before 14.16.1 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 15.0.0 to before 15.14.0 | Vulnerable | NodeJS |
- cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* Versions before 6.0.9 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* Versions up to 8.13.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:* Versions 5.11.0 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:* Versions 5.11.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:* Versions 5.12.0 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:* Versions 5.12.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:* Versions 5.13.0 Vulnerable ·Tenable
- cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* Versions 5.13.0 – 5.17.0 Vulnerable ·Tenable
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* Versions 34 Vulnerable ·Fedoraproject
- cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:* Versions 8.2.19 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:* Versions 9.2.10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:* Versions 10.1.1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:* Versions 8.2.19 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:* Versions 9.2.10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:* Versions 10.1.1 Vulnerable ·McAfee
- cpe:2.3:o:checkpoint:quantum_security_management_firmware:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_management_firmware:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_security_management:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:o:checkpoint:multi-domain_management_firmware:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:multi-domain_management_firmware:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:multi-domain_management:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:* Versions 12.6.0.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* Versions 13.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:* Versions 21.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* Versions 19.3.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:* Versions 20.3.1.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:* Versions 21.0.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* Versions before 9.2.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* Versions a9.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* Versions up to 5.7.33; 8.0.15 – 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* Versions 8.57 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* Versions 8.58 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* Versions 8.59 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* Versions 17.7 – 17.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* Versions 19.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* Versions 20.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* Versions 21.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:* Versions before 18.1.0.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Oracle
- cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:* Versions 10.2.0.0 to before 10.2.1.0-17sv Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:a:sonicwall:capture_client:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·SonicWall
- cpe:2.3:o:sonicwall:sonicos:7.0.1.0:*:*:*:*:*:*:* Versions 7.0.1.0 Vulnerable ·SonicWall
- cpe:2.3:o:siemens:ruggedcom_rcm1224_firmware:*:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:ruggedcom_rcm1224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_w1700_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_w1700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr552-12_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr552-12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:*:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cloud_connect_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:*:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_basic_panels_2nd_generation_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_basic_panels_2nd_generation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_mv500_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_mv500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_us_firmware:*:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:* Versions 2.2 to before 3.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:*:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_telecontrol_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_telecontrol:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_neo_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_neo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:* Versions 9.1.0.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:*:*:*:*:*:*:*:* Versions 2019 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_process_historian_opc_ua_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf166c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf166c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf360r_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf360r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215_fc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215_fc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_connect_300_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_connect_300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions 2.0 to before 2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simatic_logon:*:*:*:*:*:*:*:* Versions 1.6.0.2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_logon:1.5:sp3_update_1:*:*:*:*:*:* Versions 1.5 sp3_update_1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_telecontrol:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:* Versions 1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:* Versions 1.0 sp1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec_pni:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:14.0:-:*:*:*:*:*:* Versions 14.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:14.0:sp1:*:*:*:*:*:* Versions 14.0 sp1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:14.0:sp2:*:*:*:*:*:* Versions 14.0 sp2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:14.0:sp2_update1:*:*:*:*:*:* Versions 14.0 sp2_update1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:14.0:sp2_update2:*:*:*:*:*:* Versions 14.0 sp2_update2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* Versions before 1.0.1.1 Vulnerable ·Siemens
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 10.0.0 – 10.12.0 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 10.13.0 – 10.24.0 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 12.0.0 – 12.12.0 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 12.13.0 to before 12.22.1 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 14.0.0 – 14.14.0 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 14.15.0 to before 14.16.1 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 15.0.0 to before 15.14.0 Vulnerable ·NodeJS
Remediation
- Fix · GHSA-83mx-573x-5rw9 openssl-src (crates.io) Fixed in 111.15.0 Advisory →
Red Hat 10 advisories
- RHSA-2021:1202 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 3.1 Service Pack 12 security update
- Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native-1.2.23-24.redhat_24.ep7.el7
- RHSA-2021:1203 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 3.1 Service Pack 12 security update
- Red Hat JBoss Web Server 3.1
- RHSA-2021:1200 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
- JBCS 2.4.37 SP7
Show 7 more Red Hat advisories
- RHSA-2021:1199 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
- Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd-2.4.37-70.jbcs.el7, jbcs-httpd24-httpd-devel-2.4.37-70.jbcs.el7, jbcs-httpd24-httpd-manual-2.4.37-70.jbcs.el7 +22
- RHSA-2021:1195 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 5.4.2 Security Update
- Red Hat JBoss Web Server 5.4 for RHEL 7 Server jws5-tomcat-native-1.2.25-4.redhat_4.el7jws
- Red Hat JBoss Web Server 5.4 for RHEL 8 jws5-tomcat-native-1.2.25-4.redhat_4.el8jws
- RHSA-2021:1196 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 5.4.2 Security Update
- Red Hat JBoss Web Server 5
- RHSA-2021:1189 Released 2021-04-14 · Red Hat rating ImportantRed Hat Virtualization security, bug fix, and enhancement update
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.5-20210330.0.el8_3, redhat-virtualization-host-image-update-4.4.5-20210330.0.el8_3
- RHSA-2021:1131 Released 2021-04-07 · Red Hat rating Importantopenssl security update
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) openssl-1:1.1.1c-5.el8_1, openssl-devel-1:1.1.1c-5.el8_1, openssl-libs-1:1.1.1c-5.el8_1 +1
- RHSA-2021:1063 Released 2021-04-05 · Red Hat rating Importantopenssl security update
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) openssl-1:1.1.1c-18.el8_2, openssl-devel-1:1.1.1c-18.el8_2, openssl-libs-1:1.1.1c-18.el8_2 +1
- RHSA-2021:1024 Released 2021-03-30 · Red Hat rating Importantopenssl security update
- Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1g-15.el8_3, openssl-devel-1:1.1.1g-15.el8_3, openssl-libs-1:1.1.1g-15.el8_3 +1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
OpenSSL — FEDORA-2021-cbf14ab8f9
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2021-02414 CA certificate check bypass with X509_V_FLAG_X509_STRICTPriority MEDIUM 58
- Advisory ·
OpenSSL — 20210325 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2021-02414 CA certificate check bypass with X509_V_FLAG_X509_STRICTPriority MEDIUM 58
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| JBCS 2.4.37 SP7 | Fixed | RHSA-2021:1200 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2021:1024 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.1) | Fixed | RHSA-2021:1131 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.2) | Fixed | RHSA-2021:1063 |
| Red Hat JBoss Core Services on RHEL 7 Server | Fixed | RHSA-2021:1199 |
| Red Hat JBoss Web Server 3.1 | Fixed | RHSA-2021:1203 |
| Red Hat JBoss Web Server 3.1 for RHEL 7 | Fixed | RHSA-2021:1202 |
| Red Hat JBoss Web Server 5 | Fixed | RHSA-2021:1196 |
| Red Hat JBoss Web Server 5.4 for RHEL 7 Server | Fixed | RHSA-2021:1195 |
| Red Hat JBoss Web Server 5.4 for RHEL 8 | Fixed | RHSA-2021:1195 |
| Red Hat Virtualization 4 Hypervisor for RHEL 8 | Fixed | RHSA-2021:1189 |
Not affected: 6 products
- RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4 Hypervisor for RHEL 8
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3449
- 2026-10-03 Alias added: GHSA-83mx-573x-5rw9
- 2026-10-08 CISA SSVC decision points changed
- 2026-10-09 Priority changed: MEDIUM → HIGH
References
Patch 4
Advisory 24
- https://www.openssl.org/news/secadv/20210325.txt
- 20210325 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
- DSA-4875
- [oss-security] 20210327 OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210327 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210328 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210328 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- GLSA-202103-03
- FEDORA-2021-cbf14ab8f9
- https://www.tenable.com/security/tns-2021-10
- https://www.tenable.com/security/tns-2021-09
- https://security.netapp.com/advisory/ntap-20210513-0002/
- https://security.netapp.com/advisory/ntap-20210326-0006/
- https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc
- https://www.tenable.com/security/tns-2021-06
- https://www.tenable.com/security/tns-2021-05
- https://kc.mcafee.com/corporate/index?page=content&id=SB10356
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013
- [debian-lts-announce] 20210831 [SECURITY] [DLA 2751-1] postgresql-9.6 security update
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-3449
Other 9
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://security.netapp.com/advisory/ntap-20210513-0002
- https://security.netapp.com/advisory/ntap-20210326-0006
- https://rustsec.org/advisories/RUSTSEC-2021-0055.html
- https://rustsec.org/advisories/RUSTSEC-2021-0055
- https://lists.fedoraproject.org/archives/list/[email protected]/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP
- https://github.com/alexcrichton/openssl-src-rs
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2021-3449 · CVE Program
- CVE-2021-3449 · NVD
- FIRST EPSS
- GHSA-83mx-573x-5rw9 · GitHub Advisory Database · CC BY 4.0
- CVE-2021-3449 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences