Known vulnerabilities in Siemens SCALANCE XCM328
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-9232 | Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the… | Not rated | Sep 30, 2025 |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | Not rated | Sep 30, 2025 |
| CVE-2025-9230 | Out-of-bounds read & write in RFC 3211 KEK Unwrap | Not rated | Sep 30, 2025 |
| CVE-2025-39865 | tee: fix NULL pointer dereference in tee_shm_put | Not rated | Sep 19, 2025 |
| CVE-2025-39864 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss()… | 8.8 High | Sep 19, 2025 |
| CVE-2025-39860 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in… | 8.0 High | Sep 19, 2025 |
| CVE-2025-39853 | i40e: Fix potential invalid access when MAC list is empty | Not rated | Sep 19, 2025 |
| CVE-2025-39846 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in… | Not rated | Sep 19, 2025 |
| CVE-2025-39841 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in… | 9.8 Critical | Sep 19, 2025 |
| CVE-2025-39839 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding… | 8.8 High | Sep 19, 2025 |
| CVE-2025-59375 | libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is… | 7.5 High | Sep 15, 2025 |
| CVE-2025-9086 | 1 | 7.5 High | Sep 12, 2025 |
| CVE-2025-38498 | In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not… | 7.8 High | Jul 30, 2025 |
| CVE-2025-38350 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child… | 7.8 High | Jul 19, 2025 |
| CVE-2025-6141 | A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic | 4.8 Medium | Jun 16, 2025 |
| CVE-2025-40569 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… | 4.8 Medium | Jun 10, 2025 |
| CVE-2025-40568 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… | 4.3 Medium | Jun 10, 2025 |
| CVE-2025-40567 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328… | 6.5 Medium | Jun 10, 2025 |
| CVE-2024-41797 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8… | 4.3 Medium | Jun 10, 2025 |
| CVE-2025-4373 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | 4.8 Medium | May 6, 2025 |
| CVE-2025-3360 | Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601(). | 3.7 Low | Apr 7, 2025 |
| CVE-2025-1390 | The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing,… | 6.1 Medium | Feb 18, 2025 |
| CVE-2025-0725 | When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the… | 7.3 High | Feb 5, 2025 |
| CVE-2025-0665 | libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having… | 7.0 High | Feb 5, 2025 |
| CVE-2025-0167 | When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used… | 3.4 Low | Feb 5, 2025 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91