Skip to content

Vulnerabilities of Siemens SCALANCE XR526-8C, 1x230V (L3 int.)

Is your version affected?

CVE Summary Score Published
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 High May 12, 2026
CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response… 9.0 Critical Jul 9, 2024
CVE-2022-46143 Affected devices do not check the TFTP blocksize correctly 2.7 Low Dec 13, 2022
CVE-2022-46142 Affected devices store the CLI user passwords encrypted in flash memory 5.7 Medium Dec 13, 2022
CVE-2022-46140 Affected devices use a weak encryption scheme to encrypt the debug zip file 6.5 Medium Dec 13, 2022
CVE-2022-31765 Affected devices do not properly authorize the change password function of the web interface 8.8 High Oct 11, 2022
CVE-2022-36325 Affected devices do not properly sanitize data introduced by an user when rendering the web interface 6.8 Medium Aug 10, 2022
CVE-2022-36324 Affected devices do not properly handle the renegotiation of SSL/TLS parameters 7.5 High Aug 10, 2022
CVE-2022-36323 Affected devices do not properly sanitize an input field 9.1 Critical Aug 10, 2022
CVE-2021-37182 A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All… Not rated Jun 14, 2022
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Not rated Mar 15, 2022
CVE-2020-28400 Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… 7.5 High Jul 13, 2021
CVE-2017-12736 After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under… 8.8 High Dec 26, 2017

Other Siemens products