Scalance X208Pro Firmware Vulnerabilities (3 CVEs)

CVE-2022-40631 Oct 11, 11:15 MEDIUM This Month

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0), SCALANCE X202-2IRT. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Siemens Scalance Xf204 2Ba Irt Firmware Scalance X202 2Irt Firmware Scalance X204Irt Firmware +27

NVD VulDB

CVSS 3.1

6.1

EPSS

0.4%

CVE-2021-25669 Apr 22, 21:15 CRITICAL PATCH Act Now

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Buffer Overflow Stack Overflow Siemens Scalance Xf204 2Ba Irt Firmware +28

NVD

CVSS 3.1

9.8

EPSS

2.1%

CVE-2021-25668 Apr 22, 21:15 CRITICAL PATCH Act Now

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Heap Overflow Siemens Scalance Xf204 2Ba Irt Firmware Scalance Xf201 3P Irt Firmware +27

NVD

CVSS 3.1

9.8

EPSS

1.6%

Scalance X208Pro Firmware

Monthly