CVE-2025-15467: openssl from 3.0.0 (inclusive), before 3.0.19 (exclusive), from 3.1.0 (inclusive), before 3.3.6 (exclusive), from…

Affected technology

openssl · from 3.0.0 (inclusive), before 3.0.19 (exclusive)
openssl

openssl · from 3.1.0 (inclusive), before 3.3.6 (exclusive)
openssl

openssl · from 3.4.0 (inclusive), before 3.4.4 (exclusive)
openssl

openssl · from 3.5.0 (inclusive), before 3.5.5 (exclusive)
openssl

openssl · from 3.6.0 (inclusive), before 3.6.1 (exclusive)
openssl

OpenSSL · 3.6.0 to before 3.6.1, 3.5.0 to before 3.5.5, 3.4.0 to before 3.4.4, 3.3.0 to before 3.3.6, 3.0.0 to before 3.0.19
OpenSSL

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Core Services 2.4.62.SP3 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.14 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.17 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.19 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.20 · Exact affected versions not specified by the source
Red Hat

Service Interconnect 1 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

Cost Management 4 · Exact affected versions not specified by the source
Red Hat

Red Hat AI Inference Server 3.2 · Exact affected versions not specified by the source
Red Hat

Red Hat Discovery 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Hardened Images · Exact affected versions not specified by the source
Red Hat

Red Hat Insights proxy 1.5 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 · Exact affected versions not specified by the source
Red Hat

Red Hat Update Infrastructure 5 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

AI Lightweight Inference Server · 0 to before *
Siemens

Connector for Azure · 0 to before V1.8.0
Siemens

Databus · 0 to before V3.3.2
Siemens

Desigo CC family V7 · 0 to before *
Siemens

Desigo CC family V8 · 0 to before *
Siemens

Desigo CC family V9 · 0 to before V9.0 QU1
Siemens

HiMed Cockpit · 0 to before *
Siemens

RUGGEDCOM RM1224 LTE(4G) EU · 0 to before *
Siemens

RUGGEDCOM RM1224 LTE(4G) NAM · 0 to before *
Siemens

SCALANCE LPE9403 · 0 to before *
Siemens

SCALANCE LPE9413 · 0 to before *
Siemens

SCALANCE LPE9433 · 0 to before *
Siemens

SCALANCE M804PB · 0 to before *
Siemens

SCALANCE M812-1 ADSL-Router family · 0 to before *
Siemens

SCALANCE M816-1 ADSL-Router family · 0 to before *
Siemens

SCALANCE M826-2 SHDSL-Router · 0 to before *
Siemens

SCALANCE M874-2 · 0 to before *
Siemens

SCALANCE M874-3 · 0 to before *
Siemens

SCALANCE M874-3 3G-Router (CN) · 0 to before *
Siemens

SCALANCE M876-3 · 0 to before *
Siemens

SCALANCE M876-3 (ROK) · 0 to before *
Siemens

SCALANCE M876-4 · 0 to before *
Siemens

SCALANCE M876-4 (EU) · 0 to before *
Siemens

SCALANCE M876-4 (NAM) · 0 to before *
Siemens

SCALANCE MUB852-1 (A1) · 0 to before *
Siemens

SCALANCE MUB852-1 (B1) · 0 to before *
Siemens

SCALANCE MUM853-1 (A1) · 0 to before *
Siemens

SCALANCE MUM853-1 (B1) · 0 to before *
Siemens

SCALANCE MUM853-1 (EU) · 0 to before *
Siemens

SCALANCE MUM856-1 (A1) · 0 to before *
Siemens

SCALANCE MUM856-1 (B1) · 0 to before *
Siemens

SCALANCE MUM856-1 (CN) · 0 to before *
Siemens

SCALANCE MUM856-1 (EU) · 0 to before *
Siemens

SCALANCE MUM856-1 (RoW) · 0 to before *
Siemens

SCALANCE S615 EEC LAN-Router · 0 to before *
Siemens

SCALANCE S615 LAN-Router · 0 to before *
Siemens

SCALANCE WAB762-1 · 0 to before *
Siemens

SCALANCE WAM763-1 · 0 to before *
Siemens

SCALANCE WAM763-1 (ME) · 0 to before *
Siemens

SCALANCE WAM763-1 (US) · 0 to before *
Siemens

SCALANCE WAM766-1 · 0 to before *
Siemens

SCALANCE WAM766-1 (ME) · 0 to before *
Siemens

SCALANCE WAM766-1 (US) · 0 to before *
Siemens

SCALANCE WAM766-1 EEC · 0 to before *
Siemens

SCALANCE WAM766-1 EEC (ME) · 0 to before *
Siemens

SCALANCE WAM766-1 EEC (US) · 0 to before *
Siemens

SCALANCE WUB762-1 · 0 to before *
Siemens

SCALANCE WUB762-1 iFeatures · 0 to before *
Siemens

SCALANCE WUM763-1 · 0 to before *
Siemens

SCALANCE WUM763-1 (US) · 0 to before *
Siemens

SCALANCE WUM766-1 · 0 to before *
Siemens

SCALANCE WUM766-1 (ME) · 0 to before *
Siemens

SCALANCE WUM766-1 (USA) · 0 to before *
Siemens

SCALANCE XC316-8 · 0 to before *
Siemens

SCALANCE XC324-4 · 0 to before *
Siemens

SCALANCE XC324-4 EEC · 0 to before *
Siemens

SCALANCE XC332 · 0 to before *
Siemens

SCALANCE XC416-8 · 0 to before *
Siemens

SCALANCE XC424-4 · 0 to before *
Siemens

SCALANCE XC432 · 0 to before *
Siemens

SCALANCE XR302-32 · 0 to before *
Siemens

SCALANCE XR322-12 · 0 to before *
Siemens

SCALANCE XR326-8 · 0 to before *
Siemens

SCALANCE XR326-8 EEC · 0 to before *
Siemens

SCALANCE XR502-32 · 0 to before *
Siemens

SCALANCE XR522-12 · 0 to before *
Siemens

SCALANCE XR524-8WG · 0 to before *
Siemens

SCALANCE XR526-8 · 0 to before *
Siemens

Shopfloor IT Suite · 0 to before *
Siemens

SIDIS Prime · V4.0.700 to before *
Siemens

Siemens OPC UA Modelling Editor (SiOME) · 0 to before *
Siemens

SIMATIC eaSie Core Package · 0 to before *
Siemens

SIMATIC eaSie PCS 7 Skill Package · 0 to before *
Siemens

SIMATIC IoT2050 Advanced · 0 to before *
Siemens

SIMATIC IPC BX-21A · 0 to before *
Siemens

SIMATIC IPC MD-57A · 0 to before *
Siemens

SIMATIC IPC ORCLA · 0 to before *
Siemens

SIMATIC Logon V1.6 · 0 to before V1.6 Upd12
Siemens

SIMATIC Logon V2.0 · 0 to before *
Siemens

SIMATIC MV530 H · 0 to before *
Siemens

SIMATIC MV530 S · 0 to before *
Siemens

SIMATIC MV540 H · 0 to before *
Siemens

SIMATIC MV540 H CRANES · 0 to before *
Siemens

SIMATIC MV540 S · 0 to before *
Siemens

SIMATIC MV550 H · 0 to before *
Siemens

SIMATIC MV550 S · 0 to before *
Siemens

SIMATIC MV560 U · 0 to before *
Siemens

SIMATIC MV560 X · 0 to before *
Siemens

SIMATIC PCS neo V6.0 · 0 to before *
Siemens

SIMATIC PDM V9.3 · 0 to before V9.3 SP2
Siemens

SIMATIC RTLS Locating Manager · 0 to before *
Siemens

SIMATIC STEP 7 V5 · 0 to before V5.7 SP4
Siemens

SIMATIC Target · 0 to before *
Siemens

SIMATIC WinCC OA V3.19 · 0 to before V3.19 P024
Siemens

SIMATIC WinCC OA V3.20 · 0 to before V3.20 P012
Siemens

SIMATIC WinCC OA V3.21 · 0 to before V3.21 P02
Siemens

SIMATIC WinCC Runtime Advanced V17 · 0 to before V17 Update 9
Siemens

SIMATIC WinCC Unified Sequence · 0 to before V21
Siemens

SIMATIC WinCC V7.5 · 0 to before *
Siemens

SIMATIC WinCC V8.0 · 0 to before *
Siemens

SIMATIC WinCC V8.1 · 0 to before *
Siemens

SIMOTION OACAMGEN · 0 to before *
Siemens

SIMOVE Fleetmanager V3.1 · 0 to before V3.1.13
Siemens

SIMOVE Fleetmanager V3.2 · 0 to before V3.2.4
Siemens

SIMOVE Fleetmanager V3.3 · 0 to before V3.3.2
Siemens

SINAMICS G200 · V6.3 to before *
Siemens

SINAMICS G220 · V6.3 to before *
Siemens

SINAMICS S200 · V6.3 to before *
Siemens

SINAMICS S210 · V6.3 to before *
Siemens

SINAMICS S220 · V6.3 to before *
Siemens

SINEC INS · 0 to before V1.0 SP2 Update 5
Siemens

SINEC NMS · 0 to before *
Siemens

SINEC Security Monitor · 0 to before *
Siemens

SINUMERIK Access MyMachine /OPC UA · 0 to before V4.2 SP3
Siemens

SIPLANT · 0 to before *
Siemens

SITRANS ASM IQ · 0 to before *
Siemens

SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ) · 0 to before *
Siemens

User Management Component (UMC) · 0 to before V2.15.3.0
Siemens

Visual Inspection Cockpit · 0 to before *
Siemens

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could run code remotely and disrupt service under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.