Siemens

Simatic Itc2200 Pro Firmware

19 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2017-18922

  • EPSS 4.78%
  • Published 30.06.2020 11:15:10
  • Last modified 21.11.2024 03:21:16

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overf...

6.5

CVE-2020-14405

  • EPSS 1.45%
  • Published 17.06.2020 16:15:12
  • Last modified 21.11.2024 05:03:12

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.

5.5

CVE-2020-14404

  • EPSS 1.33%
  • Published 17.06.2020 16:15:12
  • Last modified 21.11.2024 05:03:11

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.

5.5

CVE-2020-14403

  • EPSS 1.11%
  • Published 17.06.2020 16:15:12
  • Last modified 21.11.2024 05:03:11

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.

5.5

CVE-2020-14402

  • EPSS 2.22%
  • Published 17.06.2020 16:15:12
  • Last modified 21.11.2024 05:03:11

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.

6.5

CVE-2020-14401

  • EPSS 1.61%
  • Published 17.06.2020 16:15:12
  • Last modified 21.11.2024 05:03:11

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.

7.5

CVE-2019-20840

  • EPSS 2.03%
  • Published 17.06.2020 16:15:11
  • Last modified 21.11.2024 04:39:30

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.

7.5

CVE-2020-14398

  • EPSS 2.27%
  • Published 17.06.2020 16:15:11
  • Last modified 21.11.2024 05:03:10

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.

7.5

CVE-2020-14397

  • EPSS 4.44%
  • Published 17.06.2020 16:15:11
  • Last modified 21.11.2024 05:03:10

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.

7.5

CVE-2020-14396

  • EPSS 1.58%
  • Published 17.06.2020 16:15:11
  • Last modified 21.11.2024 05:03:10

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.