Aller au contenu

Vulnérabilités de Siemens SCALANCE XF204

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 Élevée 12 mai 2026
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée 27 janv. 2026
CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response… 9.0 Critique 9 juil. 2024
CVE-2023-44321 Affected devices do not properly validate the length of inputs when performing certain configuration changes in the… 2.7 Faible 14 nov. 2023
CVE-2023-44318 Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the… 4.9 Moyenne 14 nov. 2023
CVE-2022-46143 Affected devices do not check the TFTP blocksize correctly 2.7 Faible 13 déc. 2022
CVE-2022-46142 Affected devices store the CLI user passwords encrypted in flash memory 5.7 Moyenne 13 déc. 2022
CVE-2022-46140 Affected devices use a weak encryption scheme to encrypt the debug zip file 6.5 Moyenne 13 déc. 2022
CVE-2022-40631 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All… Non notée 11 oct. 2022
CVE-2022-31765 Affected devices do not properly authorize the change password function of the web interface 8.8 Élevée 11 oct. 2022
CVE-2022-36325 Affected devices do not properly sanitize data introduced by an user when rendering the web interface 6.8 Moyenne 10 août 2022
CVE-2022-36324 Affected devices do not properly handle the renegotiation of SSL/TLS parameters 7.5 Élevée 10 août 2022
CVE-2022-36323 Affected devices do not properly sanitize an input field 9.1 Critique 10 août 2022
CVE-2022-26649 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… 9.6 Critique 12 juil. 2022
CVE-2022-26648 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… 8.2 Élevée 12 juil. 2022
CVE-2022-26647 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… 8.8 Élevée 12 juil. 2022
CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… Non notée 15 mars 2022
CVE-2021-3712 ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding… Non notée 24 août 2021
CVE-2020-28400 Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… 7.5 Élevée 13 juil. 2021
CVE-2021-25669 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions <… Non notée 22 avr. 2021
CVE-2021-25668 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions <… Non notée 22 avr. 2021
CVE-2019-19301 A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE… 7.5 Élevée 14 avr. 2020
CVE-2019-13946 Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple… 7.5 Élevée 11 févr. 2020
CVE-2019-6569 The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into… Non notée 26 mars 2019
CVE-2017-12736 After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under… 8.8 Élevée 26 déc. 2017

Autres produits Siemens