Scalance Xc224 4C G E Ip Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36325 Aug 10, 12:15 MEDIUM CISA This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware +87

NVD VulDB

CVSS 3.1

6.8

EPSS

0.3%

CVE-2022-36324 Aug 10, 12:15 HIGH CISA Act Now

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware +81

NVD VulDB

CVSS 3.1

7.5

EPSS

1.1%

CVE-2022-36323 Aug 10, 12:15 CRITICAL PATCH CISA Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware +87

NVD VulDB

CVSS 3.1

9.1

EPSS

0.5%

CVE-2022-36325

EPSS 0% CVSS 6.8

MEDIUM This Month

XSS Siemens Scalance W700 Ieee 802 11N Firmware +89

NVD VulDB

CVE-2022-36324

EPSS 1% CVSS 7.5

HIGH Act Now

Denial Of Service Siemens Scalance W700 Ieee 802 11N Firmware +83

NVD VulDB

CVE-2022-36323

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Siemens Scalance W700 Ieee 802 11N Firmware +89

NVD VulDB