Scalance Xm 400 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3449 Mar 25, 15:15 Cargo MEDIUM PATCH This Month

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Node.js OpenSSL Debian +113

NVD

CVSS 3.1

5.9

EPSS

62.9%

CVE-2017-12736 Dec 26, 04:29 HIGH This Week

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens Scalance Xb 200 Firmware Scalance Xc 200 Firmware Scalance Xp 200 Firmware +4

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2021-3449 Cargo

EPSS 63% CVSS 5.9

MEDIUM PATCH This Month

Denial Of Service Null Pointer Dereference Node.js +115

NVD

CVE-2017-12736

EPSS 0% CVSS 8.8

HIGH This Week

Authentication Bypass Siemens Scalance Xb 200 Firmware +6

NVD