Vulnerabilities of Siemens SCALANCE W788-2 M12
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-40833 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests | 7.5 High | May 12, 2026 |
| CVE-2024-3596 | RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response… | 9.0 Critical | Jul 9, 2024 |
| CVE-2024-30191 | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12… | 8.4 High | Apr 9, 2024 |
| CVE-2024-30190 | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12… | 6.1 Medium | Apr 9, 2024 |
| CVE-2024-30189 | A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions), SCALANCE W721-1 RJ45… | 6.1 Medium | Apr 9, 2024 |
| CVE-2023-44373 | Affected devices do not properly sanitize an input field | 9.1 Critical | Nov 14, 2023 |
| CVE-2022-46143 | Affected devices do not check the TFTP blocksize correctly | 2.7 Low | Dec 13, 2022 |
| CVE-2022-46142 | Affected devices store the CLI user passwords encrypted in flash memory | 5.7 Medium | Dec 13, 2022 |
| CVE-2022-46140 | Affected devices use a weak encryption scheme to encrypt the debug zip file | 6.5 Medium | Dec 13, 2022 |
| CVE-2022-31765 | Affected devices do not properly authorize the change password function of the web interface | 8.8 High | Oct 11, 2022 |
| CVE-2022-36325 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface | 6.8 Medium | Aug 10, 2022 |
| CVE-2022-36324 | Affected devices do not properly handle the renegotiation of SSL/TLS parameters | 7.5 High | Aug 10, 2022 |
| CVE-2022-36323 | Affected devices do not properly sanitize an input field | 9.1 Critical | Aug 10, 2022 |
| CVE-2022-0778 | The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… | Not rated | Mar 15, 2022 |
| CVE-2021-3712 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding… | Not rated | Aug 24, 2021 |
| CVE-2020-28400 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… | 7.5 High | Jul 13, 2021 |
| CVE-2020-26141 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H | Not rated | May 11, 2021 |
| CVE-2020-26147 | An issue was discovered in the Linux kernel 5.8.9 | Not rated | May 11, 2021 |
| CVE-2020-26146 | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices | 5.3 Medium | May 11, 2021 |
| CVE-2020-26139 | An issue was discovered in the kernel in NetBSD 7.1 | Not rated | May 11, 2021 |
| CVE-2020-26143 | An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH | Not rated | May 11, 2021 |
| CVE-2020-26140 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H | Not rated | May 11, 2021 |
| CVE-2020-26144 | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices | Not rated | May 11, 2021 |
| CVE-2020-24588 | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP)… | Not rated | May 11, 2021 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91