Skip to main content

Scalance Wam763 1 Firmware

6 CVEs product

Monthly

CVE-2022-46143 Dec 13, 16:15 MEDIUM This Month

Affected devices do not check the TFTP blocksize correctly. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware Scalance Wam766 1 Firmware Scalance Wam766 1 6Ghz Firmware +98
NVD
CVSS 4.0
5.1
EPSS
0.7%
CVE-2022-46142 Dec 13, 16:15 MEDIUM This Month

Affected devices store the CLI user passwords encrypted in flash memory. Rated medium severity (CVSS 5.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware Scalance Wam766 1 Firmware Scalance Wam766 1 6Ghz Firmware +98
NVD
CVSS 4.0
5.2
EPSS
0.3%
CVE-2022-46140 Dec 13, 16:15 HIGH This Week

Affected devices use a weak encryption scheme to encrypt the debug zip file. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware Scalance Wam766 1 Firmware Scalance Wam766 1 6Ghz Firmware +98
NVD
CVSS 4.0
7.1
EPSS
0.2%
CVE-2022-31766 Oct 11, 11:15 HIGH This Week

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Scalance Wam763 1 Firmware Scalance Wam766 1 Firmware Scalance Wum763 1 Firmware +13
NVD
CVSS 3.1
8.6
EPSS
1.0%
CVE-2020-26140 May 11, 20:15 MEDIUM CISA This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Cisco Code Injection Siemens Intel +196
NVD GitHub VulDB
CVSS 3.1
6.5
EPSS
0.2%
CVE-2020-24588 May 11, 20:15 LOW POC PATCH CISA Monitor

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Microsoft Cisco Code Injection Debian Siemens +184
NVD GitHub VulDB
CVSS 3.1
3.5
EPSS
0.3%
Threat
4.2
EPSS 1% CVSS 5.1
MEDIUM This Month

Affected devices do not check the TFTP blocksize correctly. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware +100
NVD
EPSS 0% CVSS 5.2
MEDIUM This Month

Affected devices store the CLI user passwords encrypted in flash memory. Rated medium severity (CVSS 5.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware +100
NVD
EPSS 0% CVSS 7.1
HIGH This Week

Affected devices use a weak encryption scheme to encrypt the debug zip file. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Siemens Scalance Wam763 1 Firmware +100
NVD
EPSS 1% CVSS 8.6
HIGH This Week

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Scalance Wam763 1 Firmware +15
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Cisco Code Injection +198
NVD GitHub VulDB
EPSS 0% 4.2 CVSS 3.5
LOW POC PATCH Monitor

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Microsoft Cisco Code Injection +186
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy