Scalance Xf204 2Ba Irt Firmware

11 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-29054 HIGH This Week

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Siemens Scalance X200 4P Irt Firmware Scalance X201 3P Irt Firmware Scalance X201 3P Irt Pro Firmware +10

NVD

CVSS 3.1

7.4

EPSS

0.3%

CVE-2022-40631 MEDIUM This Month

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0), SCALANCE X202-2IRT. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Siemens Scalance X200 4P Irt Firmware Scalance X201 3P Irt Firmware Scalance X201 3P Irt Pro Firmware +27

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2022-36325 MEDIUM CISA This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Scalance M 800 Firmware Scalance S615 Firmware Scalance Sc 600 Firmware Scalance Sc622 2C Firmware +86

NVD VulDB

CVSS 3.1

6.8

EPSS

0.3%

CVE-2022-36324 HIGH CISA Act Now

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Scalance M 800 Firmware Scalance S615 Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance W700 Ieee 802 11N Firmware +80

NVD VulDB

CVSS 3.1

7.5

EPSS

1.1%

CVE-2022-36323 CRITICAL PATCH CISA Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Scalance M 800 Firmware Scalance S615 Firmware Scalance Sc 600 Firmware Scalance Sc622 2C Firmware +86

NVD VulDB

CVSS 3.1

9.1

EPSS

0.5%

CVE-2022-26649 CRITICAL PATCH Act Now

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Siemens Buffer Overflow Scalance X204 2 Firmware Scalance X204 2Fm Firmware Scalance X204 2Ld Firmware +26

NVD

CVSS 3.1

9.6

EPSS

1.3%

CVE-2022-26648 HIGH PATCH This Week

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Siemens Buffer Overflow Scalance X204 2 Firmware Scalance X204 2Fm Firmware Scalance X204 2Ld Firmware +26

NVD

CVSS 3.1

8.2

EPSS

0.9%

CVE-2022-26647 HIGH PATCH This Week

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Siemens Information Disclosure Scalance X200 4P Irt Firmware Scalance X201 3P Irt Firmware Scalance X201 3P Irt Pro Firmware +26

NVD

CVSS 3.1

8.8

EPSS

1.1%

CVE-2021-25669 CRITICAL PATCH Act Now

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Siemens RCE Stack Overflow Scalance X200 4P Irt Firmware +28

NVD

CVSS 3.1

9.8

EPSS

2.1%

CVE-2021-25668 CRITICAL PATCH Act Now

Buffer Overflow Heap Overflow Siemens Scalance X200 4P Irt Firmware Scalance X201 3P Irt Firmware +27

NVD

CVSS 3.1

9.8

EPSS

1.6%

CVE-2021-29998 CRITICAL Act Now

An issue was discovered in Wind River VxWorks before 6.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Vxworks Ruggedcom Win Subscriber Station Firmware Scalance X200 4 P Irt Firmware +33

NVD

CVSS 3.1

9.8

EPSS

2.4%

CVE-2023-29054

EPSS 0% CVSS 7.4

HIGH This Week

Authentication Bypass Siemens Scalance X200 4P Irt Firmware +12

NVD

CVE-2022-40631

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Siemens Scalance X200 4P Irt Firmware +29

NVD

CVE-2022-36325

EPSS 0% CVSS 6.8

MEDIUM This Month

XSS Scalance M 800 Firmware Scalance S615 Firmware +88

NVD VulDB

CVE-2022-36324

EPSS 1% CVSS 7.5

HIGH Act Now

Denial Of Service Scalance M 800 Firmware Scalance S615 Firmware +82

NVD VulDB

CVE-2022-36323

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Scalance M 800 Firmware Scalance S615 Firmware +88

NVD VulDB

CVE-2022-26649

EPSS 1% CVSS 9.6

CRITICAL PATCH Act Now

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Siemens Buffer Overflow Scalance X204 2 Firmware +28

NVD

CVE-2022-26648

EPSS 1% CVSS 8.2

HIGH PATCH This Week

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Siemens Buffer Overflow Scalance X204 2 Firmware +28

NVD

CVE-2022-26647

EPSS 1% CVSS 8.8

HIGH PATCH This Week

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Siemens Information Disclosure Scalance X200 4P Irt Firmware +28

NVD

CVE-2021-25669

EPSS 2% CVSS 9.8

CRITICAL PATCH Act Now

Buffer Overflow Siemens RCE +30

NVD

CVE-2021-25668

EPSS 2% CVSS 9.8

CRITICAL PATCH Act Now

Buffer Overflow Heap Overflow Siemens +29

NVD

CVE-2021-29998

EPSS 2% CVSS 9.8

CRITICAL Act Now

Buffer Overflow Memory Corruption Vxworks +35

NVD