Aller au contenu

Vulnérabilités de Siemens SCALANCE XRM334 (24 V DC, 8xFO)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-9232 Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the… Non notée 30 sept. 2025
CVE-2025-9231 Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the… Non notée 30 sept. 2025
CVE-2025-9230 Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an… Non notée 30 sept. 2025
CVE-2025-39865 tee: fix NULL pointer dereference in tee_shm_put Non notée 19 sept. 2025
CVE-2025-39864 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss()… 8.8 Élevée 19 sept. 2025
CVE-2025-39860 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in… 8.0 Élevée 19 sept. 2025
CVE-2025-39853 i40e: Fix potential invalid access when MAC list is empty Non notée 19 sept. 2025
CVE-2025-39846 In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in… Non notée 19 sept. 2025
CVE-2025-39841 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in… 9.8 Critique 19 sept. 2025
CVE-2025-39839 In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding… 8.8 Élevée 19 sept. 2025
CVE-2025-59375 libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is… 7.5 Élevée 15 sept. 2025
CVE-2025-9086 1 7.5 Élevée 12 sept. 2025
CVE-2025-38498 In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not… 7.8 Élevée 30 juil. 2025
CVE-2025-38350 In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child… 7.8 Élevée 19 juil. 2025
CVE-2025-6141 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic 4.8 Moyenne 16 juin 2025
CVE-2025-40569 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… 4.8 Moyenne 10 juin 2025
CVE-2025-40568 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… 4.3 Moyenne 10 juin 2025
CVE-2025-40567 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… 6.5 Moyenne 10 juin 2025
CVE-2024-41797 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8… 4.3 Moyenne 10 juin 2025
CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 4.8 Moyenne 6 mai 2025
CVE-2025-3360 A flaw was found in GLib 3.7 Faible 7 avr. 2025
CVE-2025-1390 The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing,… 6.1 Moyenne 18 févr. 2025
CVE-2025-0725 When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the… 7.3 Élevée 5 févr. 2025
CVE-2025-0665 libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having… 7.0 Élevée 5 févr. 2025
CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used… 3.4 Faible 5 févr. 2025

Autres produits Siemens