Vulnerabilities

Filters

2 selected

14 records

Sort

Vendor: Siemens Component: Scalance Xr324-12m Firmware Clear all filters

TI-2022-16672 CVE-2022-36325 · GHSA-9r25-j996-8h38

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU

LOW 34

Affected devices do not properly sanitize data introduced by an user when rendering the web interface.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.01012 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-80

TI-2022-16671 CVE-2022-36324 · GHSA-hm3h-qvm3-r8qv

Resource allocation without limits in Siemens RUGGEDCOM RM1224 LTE EU

MEDIUM 42

Affected devices do not properly handle the renegotiation of SSL/TLS parameters.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01796 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-770

TI-2022-16670 CVE-2022-36323 · GHSA-qj75-j4wq-j748

Injection in Siemens RUGGEDCOM RM1224 LTE EU

MEDIUM 45

Affected devices do not properly sanitize an input field.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01934 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-74

TI-2022-09751 CVE-2022-26380 · GHSA-jwr7-6733-ghp8

Out-of-bounds read in Siemens SCALANCE X302-7 EEC

LOW 35

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00947 Published 2022-04-12 Fixed in V4.1.4 CWE-125

TI-2022-09713 CVE-2022-26335 · GHSA-cjw6-55x9-wpp2

Buffer overflow in Siemens SCALANCE X302-7 EEC

LOW 36

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2022-04-12 Fixed in V4.1.4 CWE-120

TI-2022-09712 CVE-2022-26334 · GHSA-55vp-jm7h-v6x2

Buffer overflow in Siemens SCALANCE X302-7 EEC

LOW 36

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2022-04-12 Fixed in V4.1.4 CWE-120

TI-2022-09330 CVE-2022-25756 · GHSA-cc95-9xf2-723h

Cross-site scripting in Siemens SCALANCE X302-7 EEC

LOW 28

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00562 Published 2022-04-12 Fixed in V4.1.4 CWE-80

TI-2022-09329 CVE-2022-25755 · GHSA-vj95-2482-p3v4

Improper access control in Siemens SCALANCE X302-7 EEC

LOW 36

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01329 Published 2022-04-12 Fixed in V4.1.4 CWE-284

TI-2022-09328 CVE-2022-25754 · GHSA-pm3p-vw5f-jpj5

Cross-site request forgery in Siemens SCALANCE X302-7 EEC

LOW 39

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00533 Published 2022-04-12 Fixed in V4.1.4 CWE-352

TI-2022-09327 CVE-2022-25753 · GHSA-4r64-87qc-pvvg

Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC

MEDIUM 41

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01701 Published 2022-04-12 Fixed in V4.1.4 CWE-121

TI-2022-09326 CVE-2022-25752 · GHSA-98j4-62cf-q97h

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC…

MEDIUM 45

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01453 Published 2022-04-12 Fixed in V4.1.4 CWE-330

TI-2022-09325 CVE-2022-25751 · GHSA-qcmj-54xw-47h8

Improper input validation in Siemens SCALANCE X302-7 EEC

LOW 36

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2022-04-12 Fixed in V4.1.4 CWE-20

TI-2020-17228 CVE-2020-28400 · GHSA-7jh3-xvhx-2q5v

Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET…

MEDIUM 47

Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01856 Published 2021-07-13 Fixed in V4.7, V6.4 +13 CWE-770

TI-2020-17224 CVE-2020-28395 · GHSA-vfw8-4p7f-cjjh

Hard-coded credentials in Siemens SCALANCE X-200RNA switch family

LOW 29

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0119 Published 2021-01-12 Fixed in V3.2.7, V4.1.0 CWE-321