Skip to main content

Scalance Sc 600 Firmware

6 CVEs product

Monthly

CVE-2022-36325 Aug 10, 12:15 MEDIUM CISA This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware +87
NVD VulDB
CVSS 3.1
6.8
EPSS
0.3%
CVE-2022-36323 Aug 10, 12:15 CRITICAL PATCH CISA Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware +87
NVD VulDB
CVSS 3.1
9.1
EPSS
0.5%
CVE-2021-3449 Mar 25, 15:15 Cargo MEDIUM PATCH This Month

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Node.js OpenSSL Debian +113
NVD
CVSS 3.1
5.9
EPSS
62.9%
CVE-2021-25676 Mar 15, 17:15 HIGH This Week

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance M 800 Firmware Scalance S615 Firmware Scalance Sc 600 Firmware +1
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2019-10928 Aug 13, 19:15 MEDIUM This Month

A vulnerability has been identified in SCALANCE SC-600 (V2.0). Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Sc 600 Firmware
NVD
CVSS 3.1
6.6
EPSS
0.4%
CVE-2018-5391 Sep 06, 21:29 HIGH PATCH This Week

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Linux Microsoft Debian Red Hat +54
NVD
CVSS 3.1
7.5
EPSS
24.6%
EPSS 0% CVSS 6.8
MEDIUM This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Siemens Scalance W700 Ieee 802 11N Firmware +89
NVD VulDB
EPSS 1% CVSS 9.1
CRITICAL PATCH Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Siemens Scalance W700 Ieee 802 11N Firmware +89
NVD VulDB
EPSS 63% CVSS 5.9
MEDIUM PATCH This Month

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Node.js +115
NVD
EPSS 1% CVSS 7.5
HIGH This Week

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance M 800 Firmware +3
NVD
EPSS 0% CVSS 6.6
MEDIUM This Month

A vulnerability has been identified in SCALANCE SC-600 (V2.0). Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Sc 600 Firmware
NVD
EPSS 25% CVSS 7.5
HIGH PATCH This Week

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Linux Microsoft +56
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy