Vulnerabilities of Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-9232 | Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the… | Not rated | Sep 30, 2025 |
| CVE-2025-9231 | Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the… | Not rated | Sep 30, 2025 |
| CVE-2025-9230 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an… | Not rated | Sep 30, 2025 |
| CVE-2025-39865 | tee: fix NULL pointer dereference in tee_shm_put | Not rated | Sep 19, 2025 |
| CVE-2025-39864 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss()… | 8.8 High | Sep 19, 2025 |
| CVE-2025-39860 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in… | 8.0 High | Sep 19, 2025 |
| CVE-2025-39853 | i40e: Fix potential invalid access when MAC list is empty | Not rated | Sep 19, 2025 |
| CVE-2025-39846 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in… | Not rated | Sep 19, 2025 |
| CVE-2025-39841 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in… | 9.8 Critical | Sep 19, 2025 |
| CVE-2025-39839 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding… | 8.8 High | Sep 19, 2025 |
| CVE-2025-59375 | libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is… | 7.5 High | Sep 15, 2025 |
| CVE-2025-9086 | 1 | 7.5 High | Sep 12, 2025 |
| CVE-2025-38498 | In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not… | 7.8 High | Jul 30, 2025 |
| CVE-2025-38350 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child… | 7.8 High | Jul 19, 2025 |
| CVE-2025-6141 | A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic | 4.8 Medium | Jun 16, 2025 |
| CVE-2025-4373 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | 4.8 Medium | May 6, 2025 |
| CVE-2025-3360 | A flaw was found in GLib | 3.7 Low | Apr 7, 2025 |
| CVE-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 7.5 High | Mar 14, 2025 |
| CVE-2025-1390 | The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing,… | 6.1 Medium | Feb 18, 2025 |
| CVE-2025-21694 | In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2)… | 5.5 Medium | Feb 12, 2025 |
| CVE-2024-57951 | In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug… | 7.8 High | Feb 12, 2025 |
| CVE-2025-21692 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan … | 7.8 High | Feb 10, 2025 |
| CVE-2025-0725 | When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the… | 7.3 High | Feb 5, 2025 |
| CVE-2025-0665 | libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having… | 7.0 High | Feb 5, 2025 |
| CVE-2025-0167 | When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used… | 3.4 Low | Feb 5, 2025 |
Other Siemens products
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1511 91
RUGGEDCOM ROX RX1536 91