TI-2022-16670 CVE-2022-36323 · GHSA-qj75-j4wq-j748
Injection in Siemens RUGGEDCOM RM1224 LTE EU
Priority MEDIUM 45
Affected devices do not properly sanitize an input field.
Siemens
Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9
Exploited now
Siemens records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2026-78793 PHP Memory Corruption Vulnerability TI-2026-78794 PHP Stale Internal Request-State Vulnerability TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Scalance Xm408-4c Firmware · all components
TI-2022-16671 CVE-2022-36324 · GHSA-hm3h-qvm3-r8qv
Resource allocation without limits in Siemens RUGGEDCOM RM1224 LTE EU
Priority MEDIUM 42
Affected devices do not properly handle the renegotiation of SSL/TLS parameters.
TI-2020-17222 CVE-2020-28393 · GHSA-q5c9-w6w2-m4fw
An unauthenticated remote attacker could create a permanent denial-of-service condition…
Priority LOW 36
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets.
TI-2022-16672 CVE-2022-36325 · GHSA-9r25-j996-8h38
Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU
Priority LOW 34
Affected devices do not properly sanitize data introduced by an user when rendering the web interface.
TI-2021-15244 CVE-2021-37182 · GHSA-p4gg-xc3g-rqm7
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE…
Priority LOW 34
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5…
TI-2022-22784 CVE-2022-46140 · GHSA-39hc-9gp8-p9wh
Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EU
Priority LOW 31
Affected devices use a weak encryption scheme to encrypt the debug zip file.
TI-2022-22787 CVE-2022-46143 · GHSA-v7cj-vm62-r38r
Affected devices do not check the TFTP blocksize correctly.
Priority LOW 25
Affected devices do not check the TFTP blocksize correctly.
TI-2022-22786 CVE-2022-46142 · GHSA-3m3j-3mx3-jmxc
Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EU
Priority LOW 23
Affected devices store the CLI user passwords encrypted in flash memory.