جزئیات آسیب‌پذیری

CVE-2025-0725

Siemens RUGGEDCOM RST2428PSiemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familySiemens SCALANCE XCH328Siemens SCALANCE XCM324Siemens SCALANCE XCM328Siemens SCALANCE XCM332

gzip integer overflow

CVSS 3.1
7.3بالا

شرح رسمی (انگلیسی)

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.3بالا 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Siemens RUGGEDCOM RST2428P v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XCH328 v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XCM324 v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XCM328 v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XCM332 v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (230 V AC, 12xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (230 V AC, 8xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (24 V DC, 12xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (24 V DC, 8xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) v < V3.3 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.0 ≤ v < V3.1.5 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.0 ≤ v < V3.1.5 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.0 ≤ v < V3.1.5 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.0 ≤ v < V3.1.5 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.0 ≤ v < V3.1.5 CVEProject cvelistV5 (CNA)
curl curl 7.10.5 ≤ v ≤ 7.10.5 CVEProject cvelistV5 (CNA)
curl curl 7.10.6 ≤ v ≤ 7.10.6 CVEProject cvelistV5 (CNA)
curl curl 7.10.7 ≤ v ≤ 7.10.7 CVEProject cvelistV5 (CNA)
curl curl 7.10.8 ≤ v ≤ 7.10.8 CVEProject cvelistV5 (CNA)
curl curl 7.11.0 ≤ v ≤ 7.11.0 CVEProject cvelistV5 (CNA)
curl curl 7.11.1 ≤ v ≤ 7.11.1 CVEProject cvelistV5 (CNA)
curl curl 7.11.2 ≤ v ≤ 7.11.2 CVEProject cvelistV5 (CNA)
curl curl 7.12.0 ≤ v ≤ 7.12.0 CVEProject cvelistV5 (CNA)
curl curl 7.12.1 ≤ v ≤ 7.12.1 CVEProject cvelistV5 (CNA)
curl curl 7.12.2 ≤ v ≤ 7.12.2 CVEProject cvelistV5 (CNA)
curl curl 7.12.3 ≤ v ≤ 7.12.3 CVEProject cvelistV5 (CNA)
curl curl 7.13.0 ≤ v ≤ 7.13.0 CVEProject cvelistV5 (CNA)
curl curl 7.13.1 ≤ v ≤ 7.13.1 CVEProject cvelistV5 (CNA)
curl curl 7.13.2 ≤ v ≤ 7.13.2 CVEProject cvelistV5 (CNA)
curl curl 7.14.0 ≤ v ≤ 7.14.0 CVEProject cvelistV5 (CNA)
curl curl 7.14.1 ≤ v ≤ 7.14.1 CVEProject cvelistV5 (CNA)
curl curl 7.15.0 ≤ v ≤ 7.15.0 CVEProject cvelistV5 (CNA)
curl curl 7.15.1 ≤ v ≤ 7.15.1 CVEProject cvelistV5 (CNA)
curl curl 7.15.2 ≤ v ≤ 7.15.2 CVEProject cvelistV5 (CNA)
curl curl 7.15.3 ≤ v ≤ 7.15.3 CVEProject cvelistV5 (CNA)
curl curl 7.15.4 ≤ v ≤ 7.15.4 CVEProject cvelistV5 (CNA)
curl curl 7.15.5 ≤ v ≤ 7.15.5 CVEProject cvelistV5 (CNA)
curl curl 7.16.0 ≤ v ≤ 7.16.0 CVEProject cvelistV5 (CNA)
curl curl 7.16.1 ≤ v ≤ 7.16.1 CVEProject cvelistV5 (CNA)
curl curl 7.16.2 ≤ v ≤ 7.16.2 CVEProject cvelistV5 (CNA)
curl curl 7.16.3 ≤ v ≤ 7.16.3 CVEProject cvelistV5 (CNA)
curl curl 7.16.4 ≤ v ≤ 7.16.4 CVEProject cvelistV5 (CNA)
curl curl 7.17.0 ≤ v ≤ 7.17.0 CVEProject cvelistV5 (CNA)
curl curl 7.17.1 ≤ v ≤ 7.17.1 CVEProject cvelistV5 (CNA)
curl curl 7.18.0 ≤ v ≤ 7.18.0 CVEProject cvelistV5 (CNA)
curl curl 7.18.1 ≤ v ≤ 7.18.1 CVEProject cvelistV5 (CNA)
curl curl 7.18.2 ≤ v ≤ 7.18.2 CVEProject cvelistV5 (CNA)
curl curl 7.19.0 ≤ v ≤ 7.19.0 CVEProject cvelistV5 (CNA)
curl curl 7.19.1 ≤ v ≤ 7.19.1 CVEProject cvelistV5 (CNA)
curl curl 7.19.2 ≤ v ≤ 7.19.2 CVEProject cvelistV5 (CNA)
curl curl 7.19.3 ≤ v ≤ 7.19.3 CVEProject cvelistV5 (CNA)
curl curl 7.19.4 ≤ v ≤ 7.19.4 CVEProject cvelistV5 (CNA)
curl curl 7.19.5 ≤ v ≤ 7.19.5 CVEProject cvelistV5 (CNA)
curl curl 7.19.6 ≤ v ≤ 7.19.6 CVEProject cvelistV5 (CNA)
curl curl 7.19.7 ≤ v ≤ 7.19.7 CVEProject cvelistV5 (CNA)
curl curl 7.20.0 ≤ v ≤ 7.20.0 CVEProject cvelistV5 (CNA)
curl curl 7.20.1 ≤ v ≤ 7.20.1 CVEProject cvelistV5 (CNA)
curl curl 7.21.0 ≤ v ≤ 7.21.0 CVEProject cvelistV5 (CNA)
curl curl 7.21.1 ≤ v ≤ 7.21.1 CVEProject cvelistV5 (CNA)
curl curl 7.21.2 ≤ v ≤ 7.21.2 CVEProject cvelistV5 (CNA)
curl curl 7.21.3 ≤ v ≤ 7.21.3 CVEProject cvelistV5 (CNA)
curl curl 7.21.4 ≤ v ≤ 7.21.4 CVEProject cvelistV5 (CNA)
curl curl 7.21.5 ≤ v ≤ 7.21.5 CVEProject cvelistV5 (CNA)
curl curl 7.21.6 ≤ v ≤ 7.21.6 CVEProject cvelistV5 (CNA)
curl curl 7.21.7 ≤ v ≤ 7.21.7 CVEProject cvelistV5 (CNA)
curl curl 7.22.0 ≤ v ≤ 7.22.0 CVEProject cvelistV5 (CNA)
curl curl 7.23.0 ≤ v ≤ 7.23.0 CVEProject cvelistV5 (CNA)
curl curl 7.23.1 ≤ v ≤ 7.23.1 CVEProject cvelistV5 (CNA)
curl curl 7.24.0 ≤ v ≤ 7.24.0 CVEProject cvelistV5 (CNA)
curl curl 7.25.0 ≤ v ≤ 7.25.0 CVEProject cvelistV5 (CNA)
curl curl 7.26.0 ≤ v ≤ 7.26.0 CVEProject cvelistV5 (CNA)
curl curl 7.27.0 ≤ v ≤ 7.27.0 CVEProject cvelistV5 (CNA)
curl curl 7.28.0 ≤ v ≤ 7.28.0 CVEProject cvelistV5 (CNA)
curl curl 7.28.1 ≤ v ≤ 7.28.1 CVEProject cvelistV5 (CNA)
curl curl 7.29.0 ≤ v ≤ 7.29.0 CVEProject cvelistV5 (CNA)
curl curl 7.30.0 ≤ v ≤ 7.30.0 CVEProject cvelistV5 (CNA)
curl curl 7.31.0 ≤ v ≤ 7.31.0 CVEProject cvelistV5 (CNA)
curl curl 7.32.0 ≤ v ≤ 7.32.0 CVEProject cvelistV5 (CNA)
curl curl 7.33.0 ≤ v ≤ 7.33.0 CVEProject cvelistV5 (CNA)
curl curl 7.34.0 ≤ v ≤ 7.34.0 CVEProject cvelistV5 (CNA)
curl curl 7.35.0 ≤ v ≤ 7.35.0 CVEProject cvelistV5 (CNA)
curl curl 7.36.0 ≤ v ≤ 7.36.0 CVEProject cvelistV5 (CNA)
curl curl 7.37.0 ≤ v ≤ 7.37.0 CVEProject cvelistV5 (CNA)
curl curl 7.37.1 ≤ v ≤ 7.37.1 CVEProject cvelistV5 (CNA)
curl curl 7.38.0 ≤ v ≤ 7.38.0 CVEProject cvelistV5 (CNA)
curl curl 7.39.0 ≤ v ≤ 7.39.0 CVEProject cvelistV5 (CNA)
curl curl 7.40.0 ≤ v ≤ 7.40.0 CVEProject cvelistV5 (CNA)
curl curl 7.41.0 ≤ v ≤ 7.41.0 CVEProject cvelistV5 (CNA)
curl curl 7.42.0 ≤ v ≤ 7.42.0 CVEProject cvelistV5 (CNA)
curl curl 7.42.1 ≤ v ≤ 7.42.1 CVEProject cvelistV5 (CNA)
curl curl 7.43.0 ≤ v ≤ 7.43.0 CVEProject cvelistV5 (CNA)
curl curl 7.44.0 ≤ v ≤ 7.44.0 CVEProject cvelistV5 (CNA)
curl curl 7.45.0 ≤ v ≤ 7.45.0 CVEProject cvelistV5 (CNA)
curl curl 7.46.0 ≤ v ≤ 7.46.0 CVEProject cvelistV5 (CNA)
curl curl 7.47.0 ≤ v ≤ 7.47.0 CVEProject cvelistV5 (CNA)
curl curl 7.47.1 ≤ v ≤ 7.47.1 CVEProject cvelistV5 (CNA)
curl curl 7.48.0 ≤ v ≤ 7.48.0 CVEProject cvelistV5 (CNA)
curl curl 7.49.0 ≤ v ≤ 7.49.0 CVEProject cvelistV5 (CNA)
curl curl 7.49.1 ≤ v ≤ 7.49.1 CVEProject cvelistV5 (CNA)
curl curl 7.50.0 ≤ v ≤ 7.50.0 CVEProject cvelistV5 (CNA)
curl curl 7.50.1 ≤ v ≤ 7.50.1 CVEProject cvelistV5 (CNA)
curl curl 7.50.2 ≤ v ≤ 7.50.2 CVEProject cvelistV5 (CNA)
curl curl 7.50.3 ≤ v ≤ 7.50.3 CVEProject cvelistV5 (CNA)
curl curl 7.51.0 ≤ v ≤ 7.51.0 CVEProject cvelistV5 (CNA)
curl curl 7.52.0 ≤ v ≤ 7.52.0 CVEProject cvelistV5 (CNA)
curl curl 7.52.1 ≤ v ≤ 7.52.1 CVEProject cvelistV5 (CNA)
curl curl 7.53.0 ≤ v ≤ 7.53.0 CVEProject cvelistV5 (CNA)
curl curl 7.53.1 ≤ v ≤ 7.53.1 CVEProject cvelistV5 (CNA)
curl curl 7.54.0 ≤ v ≤ 7.54.0 CVEProject cvelistV5 (CNA)
curl curl 7.54.1 ≤ v ≤ 7.54.1 CVEProject cvelistV5 (CNA)
curl curl 7.55.0 ≤ v ≤ 7.55.0 CVEProject cvelistV5 (CNA)
curl curl 7.55.1 ≤ v ≤ 7.55.1 CVEProject cvelistV5 (CNA)
curl curl 7.56.0 ≤ v ≤ 7.56.0 CVEProject cvelistV5 (CNA)
curl curl 7.56.1 ≤ v ≤ 7.56.1 CVEProject cvelistV5 (CNA)
curl curl 7.57.0 ≤ v ≤ 7.57.0 CVEProject cvelistV5 (CNA)
curl curl 7.58.0 ≤ v ≤ 7.58.0 CVEProject cvelistV5 (CNA)
curl curl 7.59.0 ≤ v ≤ 7.59.0 CVEProject cvelistV5 (CNA)
curl curl 7.60.0 ≤ v ≤ 7.60.0 CVEProject cvelistV5 (CNA)
curl curl 7.61.0 ≤ v ≤ 7.61.0 CVEProject cvelistV5 (CNA)
curl curl 7.61.1 ≤ v ≤ 7.61.1 CVEProject cvelistV5 (CNA)
curl curl 7.62.0 ≤ v ≤ 7.62.0 CVEProject cvelistV5 (CNA)
curl curl 7.63.0 ≤ v ≤ 7.63.0 CVEProject cvelistV5 (CNA)
curl curl 7.64.0 ≤ v ≤ 7.64.0 CVEProject cvelistV5 (CNA)
curl curl 7.64.1 ≤ v ≤ 7.64.1 CVEProject cvelistV5 (CNA)
curl curl 7.65.0 ≤ v ≤ 7.65.0 CVEProject cvelistV5 (CNA)
curl curl 7.65.1 ≤ v ≤ 7.65.1 CVEProject cvelistV5 (CNA)
curl curl 7.65.2 ≤ v ≤ 7.65.2 CVEProject cvelistV5 (CNA)
curl curl 7.65.3 ≤ v ≤ 7.65.3 CVEProject cvelistV5 (CNA)
curl curl 7.66.0 ≤ v ≤ 7.66.0 CVEProject cvelistV5 (CNA)
curl curl 7.67.0 ≤ v ≤ 7.67.0 CVEProject cvelistV5 (CNA)
curl curl 7.68.0 ≤ v ≤ 7.68.0 CVEProject cvelistV5 (CNA)
curl curl 7.69.0 ≤ v ≤ 7.69.0 CVEProject cvelistV5 (CNA)
curl curl 7.69.1 ≤ v ≤ 7.69.1 CVEProject cvelistV5 (CNA)
curl curl 7.70.0 ≤ v ≤ 7.70.0 CVEProject cvelistV5 (CNA)
curl curl 7.71.0 ≤ v ≤ 7.71.0 CVEProject cvelistV5 (CNA)
curl curl 7.71.1 ≤ v ≤ 7.71.1 CVEProject cvelistV5 (CNA)
curl curl 7.72.0 ≤ v ≤ 7.72.0 CVEProject cvelistV5 (CNA)
curl curl 7.73.0 ≤ v ≤ 7.73.0 CVEProject cvelistV5 (CNA)
curl curl 7.74.0 ≤ v ≤ 7.74.0 CVEProject cvelistV5 (CNA)
curl curl 7.75.0 ≤ v ≤ 7.75.0 CVEProject cvelistV5 (CNA)
curl curl 7.76.0 ≤ v ≤ 7.76.0 CVEProject cvelistV5 (CNA)
curl curl 7.76.1 ≤ v ≤ 7.76.1 CVEProject cvelistV5 (CNA)
curl curl 7.77.0 ≤ v ≤ 7.77.0 CVEProject cvelistV5 (CNA)
curl curl 7.78.0 ≤ v ≤ 7.78.0 CVEProject cvelistV5 (CNA)
curl curl 7.79.0 ≤ v ≤ 7.79.0 CVEProject cvelistV5 (CNA)
curl curl 7.79.1 ≤ v ≤ 7.79.1 CVEProject cvelistV5 (CNA)
curl curl 7.80.0 ≤ v ≤ 7.80.0 CVEProject cvelistV5 (CNA)
curl curl 7.81.0 ≤ v ≤ 7.81.0 CVEProject cvelistV5 (CNA)
curl curl 7.82.0 ≤ v ≤ 7.82.0 CVEProject cvelistV5 (CNA)
curl curl 7.83.0 ≤ v ≤ 7.83.0 CVEProject cvelistV5 (CNA)
curl curl 7.83.1 ≤ v ≤ 7.83.1 CVEProject cvelistV5 (CNA)
curl curl 7.84.0 ≤ v ≤ 7.84.0 CVEProject cvelistV5 (CNA)
curl curl 7.85.0 ≤ v ≤ 7.85.0 CVEProject cvelistV5 (CNA)
curl curl 7.86.0 ≤ v ≤ 7.86.0 CVEProject cvelistV5 (CNA)
curl curl 7.87.0 ≤ v ≤ 7.87.0 CVEProject cvelistV5 (CNA)
curl curl 7.88.0 ≤ v ≤ 7.88.0 CVEProject cvelistV5 (CNA)
curl curl 7.88.1 ≤ v ≤ 7.88.1 CVEProject cvelistV5 (CNA)
curl curl 8.0.0 ≤ v ≤ 8.0.0 CVEProject cvelistV5 (CNA)
curl curl 8.0.1 ≤ v ≤ 8.0.1 CVEProject cvelistV5 (CNA)
curl curl 8.1.0 ≤ v ≤ 8.1.0 CVEProject cvelistV5 (CNA)
curl curl 8.1.1 ≤ v ≤ 8.1.1 CVEProject cvelistV5 (CNA)
curl curl 8.1.2 ≤ v ≤ 8.1.2 CVEProject cvelistV5 (CNA)
curl curl 8.10.0 ≤ v ≤ 8.10.0 CVEProject cvelistV5 (CNA)
curl curl 8.10.1 ≤ v ≤ 8.10.1 CVEProject cvelistV5 (CNA)
curl curl 8.11.0 ≤ v ≤ 8.11.0 CVEProject cvelistV5 (CNA)
curl curl 8.11.1 ≤ v ≤ 8.11.1 CVEProject cvelistV5 (CNA)
curl curl 8.2.0 ≤ v ≤ 8.2.0 CVEProject cvelistV5 (CNA)
curl curl 8.2.1 ≤ v ≤ 8.2.1 CVEProject cvelistV5 (CNA)
curl curl 8.3.0 ≤ v ≤ 8.3.0 CVEProject cvelistV5 (CNA)
curl curl 8.4.0 ≤ v ≤ 8.4.0 CVEProject cvelistV5 (CNA)
curl curl 8.5.0 ≤ v ≤ 8.5.0 CVEProject cvelistV5 (CNA)
curl curl 8.6.0 ≤ v ≤ 8.6.0 CVEProject cvelistV5 (CNA)
curl curl 8.7.0 ≤ v ≤ 8.7.0 CVEProject cvelistV5 (CNA)
curl curl 8.7.1 ≤ v ≤ 8.7.1 CVEProject cvelistV5 (CNA)
curl curl 8.8.0 ≤ v ≤ 8.8.0 CVEProject cvelistV5 (CNA)
curl curl 8.9.0 ≤ v ≤ 8.9.0 CVEProject cvelistV5 (CNA)
curl curl 8.9.1 ≤ v ≤ 8.9.1 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱۰
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۱۱/۱۷
آخرین به‌روزرسانی
۱۴۰۵/۰۷/۲۳
وضعیت
منتشرشده
صادرکننده (CNA)
curl

پیش‌بینی بهره‌برداری (EPSS)

۱٫۸٪
احتمال بهره‌برداری در ۳۰ روز
۷۸٫۶٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
اثبات مفهوم
اثر فنی
جزئی

ضعف‌ها (CWE)

  • —