Siemens Application Processing Engine Firmware vulnerabilities

2 CVEs affecting Siemens Application Processing Engine Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0224, published 2014-06-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0160: OpenSSL Information Disclosure Vulnerability, published 2014-04-07. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-04. EPSS: 100% chance of exploitation in the next 30 days. The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process…
CVE-2014-0224, published 2014-06-05. High severity, CVSS 7.4. EPSS: 95.3% chance of exploitation in the next 30 days. OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a…