Scalance Xm 400 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3449 Cargo MEDIUM PATCH This Month

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Null Pointer Dereference OpenSSL Denial Of Service Debian Linux Freebsd +103

NVD

CVSS 3.1

5.9

EPSS

62.9%

CVE-2017-12736 HIGH This Week

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Scalance Xb 200 Firmware Scalance Xc 200 Firmware Scalance Xp 200 Firmware Scalance Xr300 Wg Firmware +3

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2021-3449 Cargo

EPSS 63% CVSS 5.9

MEDIUM PATCH This Month

Null Pointer Dereference OpenSSL Denial Of Service +105

NVD

CVE-2017-12736

EPSS 0% CVSS 8.8

HIGH This Week

Authentication Bypass Scalance Xb 200 Firmware Scalance Xc 200 Firmware +5

NVD