Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Siemens Component: Scalance Xb-200 Firmware Clear all filters
TI-2022-16672 CVE-2022-36325 · GHSA-9r25-j996-8h38

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 34

Affected devices do not properly sanitize data introduced by an user when rendering the web interface.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.01012 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-80
TI-2022-16670 CVE-2022-36323 · GHSA-qj75-j4wq-j748

Injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 45

Affected devices do not properly sanitize an input field.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01934 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-74
TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2021-07799 CVE-2021-25667 · GHSA-p672-97f8-chmq

Stack-based buffer overflow in Siemens RUGGEDCOM RM1224

Priority MEDIUM 42

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All ve…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00945 Published 2021-03-15 Fixed in V4.1, V6.2 CWE-121
TI-2019-13921 CVE-2019-19301 · GHSA-j5jq-7977-4wm2

Uncontrolled resource consumption in Siemens SCALANCE X200-4P IRT

Priority LOW 36

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANC…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01361 Published 2020-04-14 Fixed in V5.5.0, V5.2.5 +3 CWE-400
TI-2019-10380 CVE-2019-13924 · GHSA-9v8p-c94c-q287

Protection mechanism failure in Siemens SCALANCE S602

Priority LOW 26

A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00825 Published 2020-02-11 Fixed in V4.1, 5.2.4 +3 CWE-693