Aller au contenu

Vulnérabilités de Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-9232 Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the… Non notée 30 sept. 2025
CVE-2025-9231 Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the… Non notée 30 sept. 2025
CVE-2025-9230 Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an… Non notée 30 sept. 2025
CVE-2025-39865 tee: fix NULL pointer dereference in tee_shm_put Non notée 19 sept. 2025
CVE-2025-39864 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss()… 8.8 Élevée 19 sept. 2025
CVE-2025-39860 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in… 8.0 Élevée 19 sept. 2025
CVE-2025-39853 i40e: Fix potential invalid access when MAC list is empty Non notée 19 sept. 2025
CVE-2025-39846 In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in… Non notée 19 sept. 2025
CVE-2025-39841 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in… 9.8 Critique 19 sept. 2025
CVE-2025-39839 In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding… 8.8 Élevée 19 sept. 2025
CVE-2025-59375 libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is… 7.5 Élevée 15 sept. 2025
CVE-2025-9086 1 7.5 Élevée 12 sept. 2025
CVE-2025-38498 In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not… 7.8 Élevée 30 juil. 2025
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child… 7.8 Élevée 19 juil. 2025
CVE-2025-6141 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic 4.8 Moyenne 16 juin 2025
CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 4.8 Moyenne 6 mai 2025
CVE-2025-3360 A flaw was found in GLib 3.7 Faible 7 avr. 2025
CVE-2024-8176 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 7.5 Élevée 14 mars 2025
CVE-2025-1390 The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing,… 6.1 Moyenne 18 févr. 2025
CVE-2025-21694 In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2)… 5.5 Moyenne 12 févr. 2025
CVE-2024-57951 In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug… 7.8 Élevée 12 févr. 2025
CVE-2025-21692 In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan … 7.8 Élevée 10 févr. 2025
CVE-2025-0725 When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the… 7.3 Élevée 5 févr. 2025
CVE-2025-0665 libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having… 7.0 Élevée 5 févr. 2025
CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used… 3.4 Faible 5 févr. 2025

Autres produits Siemens