Application Processing Engine Firmware (Siemens) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2014-06-05. Vendor: Siemens.

CVEs of Application Processing Engine Firmware

• CVE-2014-0224 - CVSS 7.4 (high), 2014-06-05: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows…
• CVE-2014-0160 - CVSS 7.5 (high), 2014-04-07: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to…