BlackTreeIndependent security intelligence

← Back to the CVE catalogue

Full vulnerability report · 2022

CVE-2022-40303High confidence

When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow

n/a · n/a

7.5HighCVSS 3.1

Recommended action

Within 7 days

High technical severity; prioritise exposed affected systems while verifying vendor guidance.

Patch available

Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

6 current

SSA-398330 · CSAF 2.0 · revision 18 · interimSiemens ProductCERTSSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5

5 known affected

The vendor explicitly identifies these products as affected by this CVE.

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V3.1.5 or later version

SSA-769027 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0

19 known affected

The vendor explicitly identifies these products as affected by this CVE.

SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0)
SCALANCE WAM763-1 (6GK5763-1AL00-7DA0)
SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0)
SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0)
SCALANCE WAM766-1 (6GK5766-1GE00-7DA0)
SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0)
SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0)
SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0)
SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0)
SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0)
SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0)
SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0)

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V3.0.0 or later version

SSA-337522 · CSAF 2.0 · revision 2 · interimSiemens ProductCERTSSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8

2 known affected

The vendor explicitly identifies these products as affected by this CVE.

SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
TIM 1531 IRC (6GK7543-1MX00-0XE0)

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V2.4.8 or later version

SSA-341067 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1

1 known affected

The vendor explicitly identifies these products as affected by this CVE.

ST7 ScadaConnect (6NH7997-5DA10-0AA0)

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V1.1 or later version

SSA-625862 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3

6 known affected

The vendor explicitly identifies these products as affected by this CVE.

SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V2.3 or later version

SSA-556635 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0

1 known affected

The vendor explicitly identifies these products as affected by this CVE.

TeleControl Server Basic V3

Summary: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Remediation: Update to V3.1.2 or later version

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current

ENISA EUVD identifier

EUVD-2022-43600

No EUVD known-exploited evidence

ENISA has published the identifier mapping but no EUVD description has been stored yet.

EUVD state: Present in the current official mapping
Known exploitation: Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score: Not supplied in the stored EUVD record
Advisory evidence: No linked advisory details stored yet

Recommended actionWithin 7 days

High technical severity; prioritise exposed affected systems while verifying vendor guidance.

Patch available

01

What, why and how

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

What

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Why

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

What

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Why

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation

?

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material

?

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path: a network path → Integer Overflow or Wraparound → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface: Network
Privileges required: None: unauthenticated exploitation is possible
User interaction: None
Attack complexity: Low: no specialised conditions are recorded
Security boundary: Unchanged: impact remains within the vulnerable component's security authority
Weakness ? CWE means Common Weakness Enumeration: a standard category for the underlying weakness.: CWE-190 ↗
CWE-190: Integer Overflow or Wraparound. The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CVSS vector ? CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CNoneConfidentiality impact: No direct loss is represented by this metric.INoneIntegrity impact: No direct loss is represented by this metric.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land: No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.

NetworkUnauthenticatedCWE-190

A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2022-43600Official EUVD mapping

0 linked advisory records.

Official EUVD record

BSI · German · WID-SEC-W-2022-2313Apple macOS: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um den Benutzer zu täuschen, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen, Rechte zu erweitern und beliebigen Code mit Kernel-Rechten auszuführen.

Official advisory

BSI · German · WID-SEC-W-2024-0794Dell ECS: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.

Official advisory

BSI · German · WID-SEC-W-2023-1614Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.

Official advisory

BSI · German · WID-SEC-W-2023-1542Red Hat OpenShift: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.

Official advisory

BSI · German · WID-SEC-W-2023-1424Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.

Official advisory

BSI · German · WID-SEC-W-2023-0633Google Pixel: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Pixel ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.

Official advisory

BSI · German · WID-SEC-W-2022-2372genua genugate: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann einige der mehreren Schwachstellen in Komponenten von Drittanbietern ausnutzen, die von genua genugate verwendet werden, um Informationen offenzulegen und potentiell weitere, unbekannte Auswirkungen zu erzielen.

Official advisory

BSI · German · WID-SEC-W-2022-2321Apple iOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um seine Privilegien zu erhöhen.

Official advisory

BSI · German · WID-SEC-W-2022-1787libxml2: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Official advisory

BSI · German · WID-SEC-W-2026-0915Kyocera Drucker: Mehrere Schwachstellen

Ein Angreifer aus dem lokalen Netzwerk kann mehrere Schwachstellen in verschiedenen Modellen der Kyocera ECOSYS und TASKalfa Produktfamilien ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.

Official advisory

BSI · German · WID-SEC-W-2023-1350Splunk Splunk Enterprise: Mehrere Schwachstellen in Komponenten von Drittanbietern

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Official advisory

CERT-FR · French · CERTFR-2026-AVI-0218Multiples vulnérabilités dans les produits VMware

VERecord?id=CVE-2022-3599 Référence CVE CVE-2022-36227 https://www.cve.org/CVERecord?id=CVE-2022-36227 Référence CVE CVE-2022-3626 https://www.cve.org/CVERecord?id=CVE-2022-3626 Référence CVE CVE-2022-3627 https://www.cve.org/CVERecord?id=CVE-2022-3627 Référence CVE CVE-2022-37434 https://www.cve.org/CVERecord?id=CVE-2022-37434 Référence CVE CVE-2022-38476 https://www.cve.org/CVERecord?id=CVE-2022-38476 Référence CVE CVE-2022-38533 https://www.cve.org/CVERecord?id=CVE-2022-38533 Référence CVE CVE-2022-3970 https://www.cve.org/CVERecord?id=CVE-2022-3970 Référence CVE CVE-2022-40090 https://www.cve.org/CVERecord?id=CVE-2022-40090 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-40897 https://www.cve.org/CVERecord?id=CVE-2022-40897 Référence CVE CVE-2022-41409 https://www.cve.org/CVERecord?id=CVE-2022-41409 Référence CVE CVE-2022-4285 https://www.cve.org/CVERecord?id=CVE-2022-4285 Référence CVE CVE-2022-43551 https://www.cve.org/CVERecord?id=CVE-2022-43551 Référence CVE CVE-2022-43552 https://www.cve.org/CVERecord?id=CVE-2022-43552 Référence CVE CVE-2022-44840 https://www.cve.org/CVERecord?id=CVE-2022-44840 Référence CVE CVE-2022-45703 https://www.cve.org/CVERecord?id=CV

Official advisory

CERT-FR · French · CERTFR-2025-AVI-1057Multiples vulnérabilités dans les produits VMware

org/CVERecord?id=CVE-2022-35737 Référence CVE CVE-2022-3602 https://www.cve.org/CVERecord?id=CVE-2022-3602 Référence CVE CVE-2022-3629 https://www.cve.org/CVERecord?id=CVE-2022-3629 Référence CVE CVE-2022-3633 https://www.cve.org/CVERecord?id=CVE-2022-3633 Référence CVE CVE-2022-37434 https://www.cve.org/CVERecord?id=CVE-2022-37434 Référence CVE CVE-2022-3786 https://www.cve.org/CVERecord?id=CVE-2022-3786 Référence CVE CVE-2022-37967 https://www.cve.org/CVERecord?id=CVE-2022-37967 Référence CVE CVE-2022-3903 https://www.cve.org/CVERecord?id=CVE-2022-3903 Référence CVE CVE-2022-3996 https://www.cve.org/CVERecord?id=CVE-2022-3996 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-4203 https://www.cve.org/CVERecord?id=CVE-2022-4203 Référence CVE CVE-2022-42898 https://www.cve.org/CVERecord?id=CVE-2022-42898 Référence CVE CVE-2022-42915 https://www.cve.org/CVERecord?id=CVE-2022-42915 Référence CVE CVE-2022-42916 https://www.cve.org/CVERecord?id=CVE-2022-42916 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-43551 https://www.cve.org/CVERecord?id=CVE-2022-43551 Référence CVE CVE-2022-43552 https://www.cve.org/CVERecord?id=CVE-

Official advisory

CERT-FR · French · CERTFR-2025-AVI-0969Multiples vulnérabilités dans les produits VMware

ERecord?id=CVE-2022-37434 Référence CVE CVE-2022-37454 https://www.cve.org/CVERecord?id=CVE-2022-37454 Référence CVE CVE-2022-3786 https://www.cve.org/CVERecord?id=CVE-2022-3786 Référence CVE CVE-2022-37967 https://www.cve.org/CVERecord?id=CVE-2022-37967 Référence CVE CVE-2022-3821 https://www.cve.org/CVERecord?id=CVE-2022-3821 Référence CVE CVE-2022-38476 https://www.cve.org/CVERecord?id=CVE-2022-38476 Référence CVE CVE-2022-39046 https://www.cve.org/CVERecord?id=CVE-2022-39046 Référence CVE CVE-2022-3996 https://www.cve.org/CVERecord?id=CVE-2022-3996 Référence CVE CVE-2022-40090 https://www.cve.org/CVERecord?id=CVE-2022-40090 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-40674 https://www.cve.org/CVERecord?id=CVE-2022-40674 Référence CVE CVE-2022-40897 https://www.cve.org/CVERecord?id=CVE-2022-40897 Référence CVE CVE-2022-41409 https://www.cve.org/CVERecord?id=CVE-2022-41409 Référence CVE CVE-2022-41715 https://www.cve.org/CVERecord?id=CVE-2022-41715 Référence CVE CVE-2022-41716 https://www.cve.org/CVERecord?id=CVE-2022-41716 Référence CVE CVE-2022-41717 https://www.cve.org/CVERecord?id=CVE-2022-41717 Référence CVE CVE-2022-41720 https://www.cve.org/CVERecord?id=

Official advisory

CERT-FR · French · CERTFR-2025-AVI-0756Multiples vulnérabilités dans les produits VMware

rg/CVERecord?id=CVE-2022-3358 Référence CVE CVE-2022-34903 https://www.cve.org/CVERecord?id=CVE-2022-34903 Référence CVE CVE-2022-3515 https://www.cve.org/CVERecord?id=CVE-2022-3515 Référence CVE CVE-2022-35737 https://www.cve.org/CVERecord?id=CVE-2022-35737 Référence CVE CVE-2022-3602 https://www.cve.org/CVERecord?id=CVE-2022-3602 Référence CVE CVE-2022-3715 https://www.cve.org/CVERecord?id=CVE-2022-3715 Référence CVE CVE-2022-3786 https://www.cve.org/CVERecord?id=CVE-2022-3786 Référence CVE CVE-2022-39046 https://www.cve.org/CVERecord?id=CVE-2022-39046 Référence CVE CVE-2022-3996 https://www.cve.org/CVERecord?id=CVE-2022-3996 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-42010 https://www.cve.org/CVERecord?id=CVE-2022-42010 Référence CVE CVE-2022-42011 https://www.cve.org/CVERecord?id=CVE-2022-42011 Référence CVE CVE-2022-42012 https://www.cve.org/CVERecord?id=CVE-2022-42012 Référence CVE CVE-2022-4415 https://www.cve.org/CVERecord?id=CVE-2022-4415 Référence CVE CVE-2022-4450 https://www.cve.org/CVERecord?id=CVE-2022-4450 Référence CVE CVE-2022-44638 https://www.cve.org/CVERecord?id=CVE-2022-44638 Référence CVE CVE-2022-46908 https://www.cve.org/CVERecord?id=CVE-

Official advisory

CERT-FR · French · CERTFR-2025-AVI-0113Multiples vulnérabilités dans les produits Siemens

955.html Bulletin de sécurité Siemens SSA-767615 du 10 février 2025 https://cert-portal.siemens.com/productcert/html/ssa-767615.html Bulletin de sécurité Siemens SSA-769027 du 10 février 2025 https://cert-portal.siemens.com/productcert/html/ssa-769027.html Référence CVE CVE-2022-2588 https://www.cve.org/CVERecord?id=CVE-2022-2588 Référence CVE CVE-2022-2663 https://www.cve.org/CVERecord?id=CVE-2022-2663 Référence CVE CVE-2022-3524 https://www.cve.org/CVERecord?id=CVE-2022-3524 Référence CVE CVE-2022-39188 https://www.cve.org/CVERecord?id=CVE-2022-39188 Référence CVE CVE-2022-39842 https://www.cve.org/CVERecord?id=CVE-2022-39842 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-43750 https://www.cve.org/CVERecord?id=CVE-2022-43750 Référence CVE CVE-2022-4450 https://www.cve.org/CVERecord?id=CVE-2022-4450 Référence CVE CVE-2022-47069 https://www.cve.org/CVERecord?id=CVE-2022-47069 Référence CVE CVE-2022-47929 https://www.cve.org/CVERecord?id=CVE-2022-47929 Référence CVE CVE-2023-0045 https://www.cve.org/CVERecord?id=CVE-2023-0045 Référence CVE CVE-2023-0215 https://www.cve.org/CVERecord?id=CVE-202

Official advisory

CERT-FR · French · CERTFR-2024-AVI-0478Multiples vulnérabilités dans les produits Siemens

org/CVERecord?id=CVE-2021-47178 Référence CVE CVE-2022-1015 https://www.cve.org/CVERecord?id=CVE-2022-1015 Référence CVE CVE-2022-2097 https://www.cve.org/CVERecord?id=CVE-2022-2097 Référence CVE CVE-2022-3435 https://www.cve.org/CVERecord?id=CVE-2022-3435 Référence CVE CVE-2022-3545 https://www.cve.org/CVERecord?id=CVE-2022-3545 Référence CVE CVE-2022-3623 https://www.cve.org/CVERecord?id=CVE-2022-3623 Référence CVE CVE-2022-3643 https://www.cve.org/CVERecord?id=CVE-2022-3643 Référence CVE CVE-2022-39189 https://www.cve.org/CVERecord?id=CVE-2022-39189 Référence CVE CVE-2022-40225 https://www.cve.org/CVERecord?id=CVE-2022-40225 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-41742 https://www.cve.org/CVERecord?id=CVE-2022-41742 Référence CVE CVE-2022-42328 https://www.cve.org/CVERecord?id=CVE-2022-42328 Référence CVE CVE-2022-42329 https://www.cve.org/CVERecord?id=CVE-2022-42329 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-4450 https://www.cve.org/CVERecord?id=CVE-2022-4450 Référence CVE CVE-2022-44792 https://www.cve.org/CVERecord?id=CVE-2022-44792 Référence CVE CVE-2022-44793 https://www.cve.org/CVERecord?id=CVE-

Official advisory

CERT-FR · French · CERTFR-2024-AVI-0262Multiples vulnérabilités dans les produits IBM

ord?id=CVE-2020-27783 Référence CVE CVE-2020-28493 https://www.cve.org/CVERecord?id=CVE-2020-28493 Référence CVE CVE-2020-36242 https://www.cve.org/CVERecord?id=CVE-2020-36242 Référence CVE CVE-2021-28957 https://www.cve.org/CVERecord?id=CVE-2021-28957 Référence CVE CVE-2021-43818 https://www.cve.org/CVERecord?id=CVE-2021-43818 Référence CVE CVE-2022-2127 https://www.cve.org/CVERecord?id=CVE-2022-2127 Référence CVE CVE-2022-25647 https://www.cve.org/CVERecord?id=CVE-2022-25647 Référence CVE CVE-2022-26377 https://www.cve.org/CVERecord?id=CVE-2022-26377 Référence CVE CVE-2022-36760 https://www.cve.org/CVERecord?id=CVE-2022-36760 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-48564 https://www.cve.org/CVERecord?id=CVE-2022-48564 Référence CVE CVE-2022-48565 https://www.cve.org/CVERecord?id=CVE-2022-48565 Référence CVE CVE-2023-0215 https://www.cve.org/CVERecord?id=CVE-2023-0215 Référence CVE CVE-2023-0286 https://www.cve.org/CVERecord?id=CVE-2023-0286 Référence CVE CVE-2023-23931 https://www.cve.org/CVERecord?id=CVE-2023-23931 Référence CVE CVE-2023-27043 https://www.cve.org/CVERecord?id=CVE-20

Official advisory

CERT-FR · French · CERTFR-2023-AVI-1015Multiples vulnérabilités dans les produits Siemens

ecord?id=CVE-2022-32208 Référence CVE CVE-2022-32221 https://www.cve.org/CVERecord?id=CVE-2022-32221 Référence CVE CVE-2022-35252 https://www.cve.org/CVERecord?id=CVE-2022-35252 Référence CVE CVE-2022-35260 https://www.cve.org/CVERecord?id=CVE-2022-35260 Référence CVE CVE-2022-35737 https://www.cve.org/CVERecord?id=CVE-2022-35737 Référence CVE CVE-2022-3715 https://www.cve.org/CVERecord?id=CVE-2022-3715 Référence CVE CVE-2022-37434 https://www.cve.org/CVERecord?id=CVE-2022-37434 Référence CVE CVE-2022-37454 https://www.cve.org/CVERecord?id=CVE-2022-37454 Référence CVE CVE-2022-3821 https://www.cve.org/CVERecord?id=CVE-2022-3821 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-40674 https://www.cve.org/CVERecord?id=CVE-2022-40674 Référence CVE CVE-2022-42784 https://www.cve.org/CVERecord?id=CVE-2022-42784 Référence CVE CVE-2022-42898 https://www.cve.org/CVERecord?id=CVE-2022-42898 Référence CVE CVE-2022-42915 https://www.cve.org/CVERecord?id=CVE-2022-42915 Référence CVE CVE-2022-42916 https://www.cve.org/CVERecord?id=CVE-2022-42916 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-43551 https://www.cve.org/CVERecord?id=CV

Official advisory

CERT-FR · French · CERTFR-2023-AVI-0499Multiples vulnérabilités dans Tenable Nessus Network Monitor

d?id=CVE-2022-29824 Référence CVE CVE-2022-31160 https://www.cve.org/CVERecord?id=CVE-2022-31160 Référence CVE CVE-2022-32205 https://www.cve.org/CVERecord?id=CVE-2022-32205 Référence CVE CVE-2022-32206 https://www.cve.org/CVERecord?id=CVE-2022-32206 Référence CVE CVE-2022-32207 https://www.cve.org/CVERecord?id=CVE-2022-32207 Référence CVE CVE-2022-32208 https://www.cve.org/CVERecord?id=CVE-2022-32208 Référence CVE CVE-2022-32221 https://www.cve.org/CVERecord?id=CVE-2022-32221 Référence CVE CVE-2022-35252 https://www.cve.org/CVERecord?id=CVE-2022-35252 Référence CVE CVE-2022-35737 https://www.cve.org/CVERecord?id=CVE-2022-35737 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-42915 https://www.cve.org/CVERecord?id=CVE-2022-42915 Référence CVE CVE-2022-42916 https://www.cve.org/CVERecord?id=CVE-2022-42916 Référence CVE CVE-2022-43551 https://www.cve.org/CVERecord?id=CVE-2022-43551 Référence CVE CVE-2022-43552 https://www.cve.org/CVERecord?id=CVE-2022-43552 Référence CVE CVE-2022-46908 https://www.cve.org/CVERecord?id=CVE-2022-46908 Référence CVE CVE-2022-4904 https://www.cve.org/CVERecord?id=CVE-2022-4904 Référence CVE CVE-2023-0465 https://www.cve.org/CVERecord?id=CVE

Official advisory

CERT-FR · French · CERTFR-2023-AVI-0428Multiples vulnérabilités dans les produits Splunk

d?id=CVE-2022-35737 Référence CVE CVE-2022-36227 https://www.cve.org/CVERecord?id=CVE-2022-36227 Référence CVE CVE-2022-37434 https://www.cve.org/CVERecord?id=CVE-2022-37434 Référence CVE CVE-2022-37599 https://www.cve.org/CVERecord?id=CVE-2022-37599 Référence CVE CVE-2022-37601 https://www.cve.org/CVERecord?id=CVE-2022-37601 Référence CVE CVE-2022-37603 https://www.cve.org/CVERecord?id=CVE-2022-37603 Référence CVE CVE-2022-37616 https://www.cve.org/CVERecord?id=CVE-2022-37616 Référence CVE CVE-2022-38900 https://www.cve.org/CVERecord?id=CVE-2022-38900 Référence CVE CVE-2022-40023 https://www.cve.org/CVERecord?id=CVE-2022-40023 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-41715 https://www.cve.org/CVERecord?id=CVE-2022-41715 Référence CVE CVE-2022-41716 https://www.cve.org/CVERecord?id=CVE-2022-41716 Référence CVE CVE-2022-41720 https://www.cve.org/CVERecord?id=CVE-2022-41720 Référence CVE CVE-2022-4200 https://www.cve.org/CVERecord?id=CVE-2022-4200 Référence CVE CVE-2022-42004 https://www.cve.org/CVERecord?id=CVE-2022-42004 Référence CVE CVE-2022-42915 https://www.cve.org/CVERecord?id=CVE-2022-42915 Référence CVE CVE-2022-42916 https://www.cve.org/CVERecord?id=CV

Official advisory

CERT-FR · French · CERTFR-2023-AVI-0197Multiples vulnérabilités dans VMware Spring

De multiples vulnérabilités ont été découvertes dans VMware Spring . Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un déni de service à distance et une exécution de code arbitraire à distance.

Official advisory

CERT-FR · French · CERTFR-2023-AVI-0110Multiples vulnérabilités dans les produits IBM

De multiples vulnérabilités ont été corrigées dans IBM . Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité, un déni de service à distance, une exécution de code arbitraire à distance, une atteinte à l'intégrité des données et une injection de code indirecte à distance (XSS).

Official advisory

CERT-FR · French · CERTFR-2022-AVI-1108Multiples vulnérabilités dans les produits Apple

itraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données. Solution Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation). Documentation Bulletin de sécurité Apple du 13 décembre 2022 https://support.apple.com/en-us/HT213516 Référence CVE CVE-2022-24836 https://www.cve.org/CVERecord?id=CVE-2022-24836 Référence CVE CVE-2022-29181 https://www.cve.org/CVERecord?id=CVE-2022-29181 Référence CVE CVE-2022-32942 https://www.cve.org/CVERecord?id=CVE-2022-32942 Référence CVE CVE-2022-32943 https://www.cve.org/CVERecord?id=CVE-2022-32943 Référence CVE CVE-2022-40303 https://www.cve.org/CVERecord?id=CVE-2022-40303 Référence CVE CVE-2022-40304 https://www.cve.org/CVERecord?id=CVE-2022-40304 Référence CVE CVE-2022-42821 https://www.cve.org/CVERecord?id=CVE-2022-42821 Référence CVE CVE-2022-42837 https://www.cve.org/CVERecord?id=CVE-2022-42837 Référence CVE CVE-2022-42840 https://www.cve.org/CVERecord?id=CVE-2022-42840 Référence CVE CVE-2022-42841 https://www.cve.org/CVERecord?id=CVE-2022-42841 Référence CVE CVE-2022-42842 https://www.cve.org/CVERecord?id=CVE-2022-42842 Référence CVE CVE-2022-42843 https://www.cve.org/CVERecord?id=CVE-2022-42843 Référence CVE CVE-2022-42844 https://www.cve.org/CVERecord?id=

Official advisory

CERT-FR · French · CERTFR-2022-AVI-1024Multiples vulnérabilités dans les produits Apple

De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

Official advisory

NCSC-NL · Dutch · NCSC-2024-0246Kwetsbaarheden verholpen in Siemens producten

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Manipulatie van gegevens - Omzeilen van beveiligingsmaatregel - (Remote) code execution (Administrator/Root rechten) - (Remote) code execution (Gebruikersrechten) - Toegang tot systeemgegevens - Verhoogde gebruikersrechten De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Official advisory

NCSC-NL · Dutch · NCSC-2025-0061Kwetsbaarheden verholpen in Siemens producten

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Cross-Site-Scripting (XSS) - Cross-Site Request Forgery (CSRF) - Manipulatie van gegevens - Omzeilen van een beveiligingsmaatregel - Omzeilen van authenticatie - (Remote) code execution (root/admin rechten) - (Remote) code execution (Gebruikersrechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Official advisory

NCSC-NL · Dutch · NCSC-2025-0051Kwetsbaarheden verholpen in Siemens producten

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Cross-Site-Scripting (XSS) - Cross-Site Request Forgery (CSRF) - Manipulatie van gegevens - Omzeilen van een beveiligingsmaatregel - Omzeilen van authenticatie - (Remote) code execution (root/admin rechten) - (Remote) code execution (Gebruikersrechten) - Toegang tot systeemgegevens - Toegang tot gevoelige gegevens De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Official advisory

03

Patch and workaround

Operational remediation based on structured source evidence.

Status ? Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.: Patch available
Affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0); SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0); SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0); SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0); SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)
Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Action: Update to V3.1.5 or later version
Workaround: No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.

04

Evidence and provenance

Published 22 Nov 2022 · Last source change 29 Apr 2025, 04:24 UTC · CWE-190 · Integer Overflow or Wraparound

CVE recordCVE.org · 5.1

CVSS sourceNIST NVD

EPSS source

?

The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.

FIRST · tracked since 2026-08-14

European sourceENISA EUVD · EUVD-2022-43600

Product sourceVendor CSAF · Siemens ProductCERT

Remediation sourceVendor CSAF · Siemens ProductCERT

CWE sourceCISA ADP

NVD statusNVD modified after enrichment

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates →

No material field changes have been recorded since change tracking began. Routine source refreshes and cosmetic edits are intentionally excluded.

2022-11-22CVE published

2025-04-29Fixed release or patch reference recorded

ENISA EUVD · EUVD-2022-43600↗Vendor CSAF · Siemens ProductCERT↗Patch or update reference↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗

Technical terms and abbreviations used in this report

CVE: Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS: Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS: Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE: Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA: CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP: Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD: National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT: A computer security incident response team that publishes warnings or coordinates incident response.
PoC: Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF: Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL: Living off the land: abuse of legitimate tools or system functions during an attack.