CVE-2024-6119
published 2024-09-03CVE-2024-6119: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
PriorityP359high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
66.58%
99.2th percentile
Issue summary: Applications performing certificate name checks (e.g., TLS
clients checking server certificates) may attempt to read an invalid memory
address resulting in abnormal termination of the application process.
Impact summary: Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can occur only when the application also
specifies an expected DNS name, Email address or IP address.
TLS servers rarely solicit client certificates, and even when they do, they
generally don't perform a name check against a reference identifier (expected
identity), but rather extract the presented identity after checking the
certificate chain. So TLS servers are generally not affected and the severity
of the issue is Moderate.
The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openssl | < openssl 3.0.14-1~deb12u2 (bookworm) | openssl 3.0.14-1~deb12u2 (bookworm) |
| msrc | azl3_cloud-hypervisor-cvm_38.0.72.2-2_on_azure_linux_3.0 | — | — |
| msrc | azl3_cloud-hypervisor-cvm_41.0.79-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_edk2_20240524git3e722403cd16-3_on_azure_linux_3.0 | — | — |
| msrc | azl3_edk2_20240524git3e722403cd16-8_on_azure_linux_3.0 | — | — |
| msrc | azl3_openssl_3.3.0-2_on_azure_linux_3.0 | — | — |
| msrc | azl3_openssl_3.3.2-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_qemu_8.2.0-16_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_cloud-hypervisor-cvm_38.0.72.2-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_cloud-hypervisor-cvm_38.0.72.2-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_hvloader_1.0.1-5_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| netapp | ontap_tools | — | — |
| openssl | openssl | >= 0 < 3.0.15-r0 | 3.0.15-r0 |
| openssl | openssl | >= 0 < 3.1.7-r0 | 3.1.7-r0 |
| openssl | openssl | >= 0 < 3.1.7-r0 | 3.1.7-r0 |
| openssl | openssl | >= 0 < 3.3.2-r0 | 3.3.2-r0 |
| openssl | openssl | >= 0 < 3.3.2-r0 | 3.3.2-r0 |
| openssl | openssl | >= 0 < 3.3.2-r0 | 3.3.2-r0 |
| openssl | openssl | >= 0 < 3.3.2-r0 | 3.3.2-r0 |
| openssl | openssl | >= 0 < 3.0.14-1~deb12u2 | 3.0.14-1~deb12u2 |
| openssl | openssl | >= 0 < 3.3.2-1 | 3.3.2-1 |
Detection & IOCsextracted from sources · hover to see the quote
- →Trigger condition: DoS occurs only when an application performs certificate name checks AND specifies an expected DNS name, Email address, or IP address while encountering an `otherName` subject alternative name in an X.509 certificate. ↗
- →The vulnerable code path is in X.509 `otherName` SAN comparison logic — monitor for abnormal process termination in TLS clients performing certificate name validation against certificates containing `otherName` SANs. ↗
- →TLS servers are generally not affected; focus detection and patching efforts on TLS client applications that validate server certificate names. ↗
- →FIPS module builds of OpenSSL (versions 3.0, 3.1, 3.2, 3.3) are NOT affected — scope detection/patching to non-FIPS OpenSSL deployments. ↗
- →FreeBSD 14.x systems using the bundled OpenSSL are affected; patch was committed 2024-09-03. Check for unpatched FreeBSD 14.x hosts running TLS client applications. ↗
- ·Only non-FIPS OpenSSL builds are vulnerable; FIPS module builds across all affected version lines (3.0–3.3) are explicitly not affected. ↗
- ·Basic certificate chain validation (signatures, dates, etc.) is unaffected; the vulnerability is isolated to the name-check comparison code path involving `otherName` SANs. ↗
- ·No workaround is available for affected systems; patching is the only remediation. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.4HIGH
vendor_oracle5.9HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
EDK II regression
vendor_ubuntu·2025-11-28·CVSS 5.8
CVE-2023-45236 [MEDIUM] EDK II regression
Title: EDK II regression
Summary: USN-7894-1 introduced a regression in EDK II
USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a
regression in the UEFI network boot. This update reverts the corresponding
fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS
Ubuntu
EDK II vulnerabilities
vendor_ubuntu·2025-11-26·CVSS 7.4
CVE-2023-45236 [HIGH] EDK II vulnerabilities
Title: EDK II vulnerabilities
Summary: Several security issues were fixed in EDK II.
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that the EDK II PE/COFF loader incorrectly handled
certain memory operations. An attacker could possibly use this issue to
cause a denial of service, obtain sensitive information, or execute
arbitrary code. This issue o
CISA ICS
Siemens SIMATIC S7-1500 CPU Family
cisa_ics·2025-06-12
Siemens SIMATIC S7-1500 CPU Family
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU Family
Release DateJune 12, 2025
Alert CodeICSA-25-162-05
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU family
- Vulnerabilities: Missing Encryption of Sensitive Data, Out-of-bounds Read, Use After Free, Stack-
CISA ICS
Siemens SCALANCE W700
cisa_ics·2025-02-13
Siemens SCALANCE W700
ICS Advisory
##
Siemens SCALANCE W700
Release DateFebruary 13, 2025
Alert CodeICSA-25-044-09
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SCALANCE W700
- Vulnerabilities: Double Free, Improper Restriction of Communication Channel to Intended Endpoints, Improper Resource Sh
Oracle
Oracle Oracle Communications Risk Matrix: Configuration (Cryptography) — CVE-2024-6119
vendor_oracle·2025-01-15·CVSS 5.9
CVE-2024-6119 [HIGH] Oracle Oracle Communications Risk Matrix: Configuration (Cryptography) — CVE-2024-6119
Oracle Oracle Communications Risk Matrix: Configuration (Cryptography) vulnerability
CVE: CVE-2024-6119
CVSS: 5.9
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2025 (JAN 2025)
Palo Alto
PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
vendor_paloalto·2024-11-07·CVSS 6.8
CVE-2014-0195 [MEDIUM] PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to Cortex XDR Agent. While Cortex XDR Agent may include the
CVEs: CVE-2014-0195, CVE-2014-0224, CVE-2014-3509, CVE-2014-3512, CVE-2014-3513, CVE-2014-3567, CVE-2015-0209, CVE-2015-0292, CVE-2015-1789, CVE-2015-1791, CVE-2015-1793, CVE-2015-3194, CVE-2016-0705, CVE-2016-0797, CVE-2016-0798, CVE-2016-0799, CVE-2016-2105, CVE-2016-2106, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176, CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2019-1551, CVE-2019-1552, CVE-2019-1559, CVE-2019-1563, CVE-2020-196
Oracle
Oracle Oracle Database Server Risk Matrix: Oracle Database Security (OpenSSL) — CVE-2024-6119
vendor_oracle·2024-10-15·CVSS 5.3
CVE-2024-6119 [HIGH] Oracle Oracle Database Server Risk Matrix: Oracle Database Security (OpenSSL) — CVE-2024-6119
Oracle Oracle Database Server Risk Matrix: Oracle Database Security (OpenSSL) vulnerability
CVE: CVE-2024-6119
CVSS: 5.3
Protocol: Multiple
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2024 (OCT 2024)
Microsoft
Possible denial of service in X.509 name checks
vendor_msrc·2024-09-10·CVSS 7.5
CVE-2024-6119 [HIGH] CWE-843 Possible denial of service in X.509 name checks
Possible denial of service in X.509 name checks
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
openssl: openssl
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.mic
BSD
FreeBSD-SA-24:13.openssl: Possible DoS in X.509 name checks in OpenSSL
bsd_advisories·2024-09-04·CVSS 7.5
CVE-2024-6119 [HIGH] FreeBSD-SA-24:13.openssl: Possible DoS in X.509 name checks in OpenSSL
FreeBSD-SA-24:13.openssl Security Advisory
The FreeBSD Project
Topic: Possible DoS in X.509 name checks in OpenSSL
Category: contrib
Module: openssl
Announced: 2024-09-03
Credits: David Benjamin (Google)
Affects: FreeBSD 14.x
Corrected: 2024-09-03 17:09:21 UTC (stable/14, 14.1-STABLE)
2024-09-04 21:07:35 UTC (releng/14.1, 14.1-RELEASE-p4)
2024-09-04 20:54:20 UTC (releng/14.0, 14.0-RELEASE-p10)
CVE Name: CVE-2024-6119
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit .
I. Background
FreeBSD includes software from the OpenSSL Project. The OpenSSL Project is a
collaborative effort to develop a robust, commercial-grade, full-featured
Open Source toolkit for the Transport La
Red Hat
openssl: Possible denial of service in X.509 name checks
vendor_redhat·2024-09-04·CVSS 7.5
CVE-2024-6119 [HIGH] CWE-843 openssl: Possible denial of service in X.509 name checks
openssl: Possible denial of service in X.509 name checks
Issue summary: Applications performing certificate name checks (e.g., TLS
clients checking server certificates) may attempt to read an invalid memory
address resulting in abnormal termination of the application process.
Impact summary: Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can oc
Ubuntu
OpenSSL vulnerability
vendor_ubuntu·2024-09-03
CVE-2024-6119 OpenSSL vulnerability
Title: OpenSSL vulnerability
Summary: OpenSSL could be made to crash or expose sensitive information
if it received a specially crafted certificate.
David Benjamin discovered that OpenSSL incorrectly handled certain
X.509 certificates. An attacker could possible use this issue to
cause a denial of service or expose sensitive information.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Palo Alto
Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119
vendor_paloalto·2024-08-22·CVSS 9.1
CVE-2024-5535 [CRITICAL] Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119
Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119
The Palo Alto Networks Product Security Assurance team has evaluated CVE-2024-5535 and CVE-2024-6119 as they relate to our products.
PAN-OS, Cloud NGFW, Prisma Access, and Cortex XDR Agent are not affected by CVE-2024-5535 or CVE-2024-6119.
At present, no other Palo Alto Networks products are known to contain the vulnerable software packages and be impacted by these issues.
Affected products: Cloud NGFW, Cortex XDR Agent, PAN-OS, Prisma Access
Solution: No software updates are required at this time.
Debian
CVE-2024-6119: openssl - Issue summary: Applications performing certificate name checks (e.g., TLS client...
vendor_debian·2024·CVSS 7.5
CVE-2024-6119 [HIGH] CVE-2024-6119: openssl - Issue summary: Applications performing certificate name checks (e.g., TLS client...
Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected D
Palo Alto
Palo Alto Networks Security Advisories
vendor_paloalto·CVSS 9.1
CVE-2024-6119 [CRITICAL] Palo Alto Networks Security Advisories
Palo Alto Networks Security Advisories
CVEs: CVE-2024-5535, CVE-2024-6119
Affected products: Cortex Data, Cortex XDR, Cortex XSIAM, Cortex XSOAR, Cortex Xpanse, GlobalProtect, PAN-OS, Panorama, Prisma Access, Prisma Browser, Prisma Cloud, Prisma SD
OSV
edk2 regression
osv·2025-11-28·CVSS 7.4
CVE-2023-45236 [HIGH] edk2 regression
edk2 regression
USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a
regression in the UEFI network boot. This update reverts the corresponding
fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that
OSV
edk2 vulnerabilities
osv·2025-11-26·CVSS 7.4
CVE-2023-45236 [HIGH] edk2 vulnerabilities
edk2 vulnerabilities
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that the EDK II PE/COFF loader incorrectly handled
certain memory operations. An attacker could possibly use this issue to
cause a denial of service, obtain sensitive information, or execute
arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2024-38
OSV
CVE-2024-6119: Issue summary: Applications performing certificate name checks (e
osv·2024-09-03·CVSS 7.5
CVE-2024-6119 [HIGH] CVE-2024-6119: Issue summary: Applications performing certificate name checks (e
Issue summary: Applications performing certificate name checks (e.g., TLS
clients checking server certificates) may attempt to read an invalid memory
address resulting in abnormal termination of the application process.
Impact summary: Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can occur only when the application also
specifies an expecte
GHSA
GHSA-7m4m-pwhv-49c5: Issue summary: Applications performing certificate name checks (e
ghsa_unreviewed·2024-09-03
CVE-2024-6119 [HIGH] CWE-843 GHSA-7m4m-pwhv-49c5: Issue summary: Applications performing certificate name checks (e
Issue summary: Applications performing certificate name checks (e.g., TLS
clients checking server certificates) may attempt to read an invalid memory
address resulting in abnormal termination of the application process.
Impact summary: Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can occur only when the application also
specifies an expecte
OSV
CVE-2024-6119: Issue summary: Applications performing certificate name checks (e
osv·2024-09-03·CVSS 7.5
CVE-2024-6119 [HIGH] CVE-2024-6119: Issue summary: Applications performing certificate name checks (e
Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected D
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2024-6119 openssl: Possible denial of service in X.509 name checks
bugzilla·2024-08-20·CVSS 7.5
CVE-2024-6119 [HIGH] CVE-2024-6119 openssl: Possible denial of service in X.509 name checks
CVE-2024-6119 openssl: Possible denial of service in X.509 name checks
Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an otherName subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can occur only when the application also
specifies an expected DNS name, Email address or IP address.
TLS servers rarely solicit client certificates, and even when they do, they
generally don't perform a name check against a "r
arXiv
Explainer-guided Targeted Adversarial Attacks against Binary Code Similarity Detection Models
arxiv_fulltext·2025-06-05
Explainer-guided Targeted Adversarial Attacks against Binary Code Similarity Detection Models
Explainer-guided Targeted Adversarial Attacks against Binary Code Similarity Detection Models
[1 ]Mingjie Chen
[1]Zhejiang University
[2 ]Tiancheng Zhu
[2]Huazhong University of Science and Technology
[3, 4]Mingxue Zhang
[3]The State Key Laboratory of Blockchain and Data Security, Zhejiang University
[4]Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security
[5]Yiling He
[5]University College London
[6]Minghao Lin
[6]University of Southern California
[7]Penghui Li
[7]Columbia University
[3]Kui Ren
[1]The first two authors contributed equally to this work. Tiancheng Zhu conducted the research during his internship at Zhejiang University.
## Abstract
Binary code similarity detection (BCSD) serves as a fundamental technique for various software engineering tasks
https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04fhttps://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0https://openssl-library.org/news/secadv/20240903.txthttp://www.openwall.com/lists/oss-security/2024/09/03/4https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.htmlhttps://security.netapp.com/advisory/ntap-20240912-0001/https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-613116.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-769027.html
2024-09-03
Published