Description
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Cloud Connector Configurator | Siemens / Cloud Connector Configurator | >= 0, < * | affected |
| Common Configurator (CC on IEM) | Siemens / Common Configurator (CC on IEM) | >= 0, < * | affected |
| Common Configurator on Device (CC on Edge) | Siemens / Common Configurator on Device (CC on Edge) | >= 0, < * | affected |
| Databus Configurator | Siemens / Databus Configurator | >= 0, < * | affected |
| Data Flow Monitoring | Siemens / Data Flow Monitoring | >= 0, < * | affected |
| Edge OPC UA Server Configurator | Siemens / Edge OPC UA Server Configurator | >= 0, < * | affected |
| Flow Creator Configurator | Siemens / Flow Creator Configurator | >= 0, < * | affected |
| github.com/google/brotli | Google / Brotli | >= 1.0.3, < 1.0.10 | affected |
| github.com/google/brotli | Google / Brotli | >= 1.1.0, < 1.1.1 | affected |
| github.com/google/brotli | Google / Brotli | >= 1.2.0, < 1.2.1 | affected |
| Heliox Dual Port 60kW | Siemens / Heliox Dual Port 60kW | >= 0, < * | unaffected |
| Heliox Flex Pro | Siemens / Heliox Flex Pro | >= 0, < * | unaffected |
| Industrial Edge Hub | Siemens / Industrial Edge Hub | >= 0, < * | affected |
| Industrial Edge Management Cloud | Siemens / Industrial Edge Management Cloud | >= 0, < * | affected |
| RUGGEDCOM APE1808 | Siemens / RUGGEDCOM APE1808 | >= 0, < * | affected |
| SICHARGE FLEX | Siemens / SICHARGE FLEX | >= 0, < * | unaffected |
| SICHARGE UC | Siemens / SICHARGE UC | >= 0, < * | unaffected |
| Sifinity Go | Siemens / Sifinity Go | >= 0, < * | unaffected |
| Sifinity Setup | Siemens / Sifinity Setup | >= 0, < * | unaffected |
| VersiCharge AC Series | Siemens / VersiCharge AC Series | >= 0, < * | unaffected |
| VersiCloud | Siemens / VersiCloud | >= 0, < * | unaffected |