Simatic Itc2200 Pro Firmware (Siemens) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-06-30. Vendor: Siemens.
CVEs of Simatic Itc2200 Pro Firmware
- CVE-2017-18922 - CVSS 9.8 (critical), 2020-06-30: It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this…
- CVE-2020-14403 - CVSS 5.4 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.
- CVE-2020-14402 - CVSS 5.4 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.
- CVE-2020-14405 - CVSS 6.5 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.
- CVE-2020-14401 - CVSS 6.5 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
- CVE-2020-14404 - CVSS 5.4 (medium), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.
- CVE-2019-20840 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.
- CVE-2020-14398 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.
- CVE-2019-20839 - CVSS 7.5 (high), 2020-06-17: libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
- CVE-2020-14397 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
- CVE-2018-21247 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c…
- CVE-2020-14396 - CVSS 7.5 (high), 2020-06-17: An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
- CVE-2019-20788 - CVSS 9.8 (critical), 2020-04-23: libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width…
- CVE-2019-15681 - CVSS 7.5 (high), 2019-10-29: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack…
- CVE-2018-20749 - CVSS 9.8 (critical), 2019-01-30: LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
- CVE-2018-20748 - CVSS 9.8 (critical), 2019-01-30: LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
- CVE-2018-20750 - CVSS 9.8 (critical), 2019-01-30: LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
- CVE-2018-20019 - CVSS 9.8 (critical), 2018-12-19: LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result…
- CVE-2017-5753 - CVSS 5.6 (medium), 2018-01-04: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local…
