A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE…
Priority LOW 34CWE-354Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.
Why it matters now
EPSS 0.00644 51st percentileScored 2026-11-07
Fix Fixed SCALANCE XM408-4C (Siemens): V6.5SCALANCE XM408-4C (L3 int.) (Siemens): V6.5+23 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE XM408-4C | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XM408-4C (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XM408-8C | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XM408-8C (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XM416-4C | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XM416-4C (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 1x230V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 1x230V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 24V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 24V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 2x230V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR524-8C, 2x230V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 1x230V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 1x230V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 24V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 24V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 2x230V | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR526-8C, 2x230V (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR528-6M | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR528-6M (2HR2) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR528-6M (2HR2, L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR528-6M (L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR552-12M | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR552-12M (2HR2) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR552-12M (2HR2) | before V6.5 | V6.5 | Patch available | CNA |
| Siemens | SCALANCE XR552-12M (2HR2, L3 int.) | before V6.5 | V6.5 | Patch available | CNA |
- SCALANCE XM408-4C VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XM408-4C (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XM408-8C VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XM408-8C (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XM416-4C VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XM416-4C (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 1x230V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 1x230V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 24V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 24V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 2x230V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR524-8C, 2x230V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 1x230V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 1x230V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 24V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 24V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 2x230V VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR526-8C, 2x230V (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR528-6M VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR528-6M (2HR2) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR528-6M (2HR2, L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR528-6M (L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR552-12M VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR552-12M (2HR2) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR552-12M (2HR2) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
- SCALANCE XR552-12M (2HR2, L3 int.) VendorSiemens Affected before V6.5 Fixed in V6.5 Patch available CNA
CPE configurations NVD · 58
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm408-4c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm408-8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm416-4c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm408-4c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm408-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm416-4c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 48 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:1x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:1x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:24v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:24v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:2x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:2x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:1x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:1x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:24v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:24v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:2x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:2x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:1x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:1x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:24v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:24v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:2x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:2x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:1x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:1x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:24v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:24v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:2x230v:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:2x230v:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr528-6m_2hr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr528-6m_2hr2_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr528-6m_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr528-6m_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr552-12m_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr552-12m_2hr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_l3_firmware:*:*:*:*:*:*:*:* | before 6.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr552-12m_2hr2_l3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:1x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:1x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:24v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:24v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:2x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:2x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:1x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:1x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:24v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:24v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:2x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:2x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:1x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:1x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:24v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:24v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:2x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:2x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:1x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:1x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:24v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:24v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:2x230v:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:2x230v:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr528-6m_2hr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr528-6m_2hr2_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr528-6m_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr528-6m_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr552-12m_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr552-12m_2hr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_l3_firmware:*:*:*:*:*:*:*:* Versions before 6.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr552-12m_2hr2_l3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE XM408-4C (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XM408-4C (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XM408-8C (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XM408-8C (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XM416-4C (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XM416-4C (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 1x230V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 1x230V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 24V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 24V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 2x230V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR524-8C, 2x230V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 1x230V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 1x230V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 24V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 24V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 2x230V (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR526-8C, 2x230V (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR528-6M (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR528-6M (2HR2) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR528-6M (2HR2, L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR528-6M (L3 int.) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR552-12M (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR552-12M (2HR2) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR552-12M (2HR2) (Siemens) Fixed in V6.5
- Fix · CNA SCALANCE XR552-12M (2HR2, L3 int.) (Siemens) Fixed in V6.5
Timeline
- 2026-10-02 Threatist record created from CVE-2021-37182
- 2026-10-03 Alias added: GHSA-p4gg-xc3g-rqm7
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
More Siemens Scalance Xm408-4c Firmware vulnerabilities
- TI-2022-16670 Injection in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1CRITICAL 9.1
- TI-2022-16671 Resource allocation without limits in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1HIGH 7.5
- TI-2020-17222 An unauthenticated remote attacker could create a permanent denial-of-service condition… CVSS 3.1HIGH 7.5
- TI-2022-16672 Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1MEDIUM 6.8
- TI-2022-22784 Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 7.1
- TI-2022-22787 Affected devices do not check the TFTP blocksize correctly. CVSS 4.0MEDIUM 5.1
Sources
- CVE-2021-37182 · CVE Program
- CVE-2021-37182 · NVD
- FIRST EPSS
- GHSA-p4gg-xc3g-rqm7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences