Vulnerabilities of Siemens SCALANCE XF204
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-40833 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests | 7.5 High | May 12, 2026 |
| CVE-2025-15467 | Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… | Not rated | Jan 27, 2026 |
| CVE-2024-3596 | RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response… | 9.0 Critical | Jul 9, 2024 |
| CVE-2023-44321 | Affected devices do not properly validate the length of inputs when performing certain configuration changes in the… | 2.7 Low | Nov 14, 2023 |
| CVE-2023-44318 | Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the… | 4.9 Medium | Nov 14, 2023 |
| CVE-2022-46143 | Affected devices do not check the TFTP blocksize correctly | 2.7 Low | Dec 13, 2022 |
| CVE-2022-46142 | Affected devices store the CLI user passwords encrypted in flash memory | 5.7 Medium | Dec 13, 2022 |
| CVE-2022-46140 | Affected devices use a weak encryption scheme to encrypt the debug zip file | 6.5 Medium | Dec 13, 2022 |
| CVE-2022-40631 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All… | Not rated | Oct 11, 2022 |
| CVE-2022-31765 | Affected devices do not properly authorize the change password function of the web interface | 8.8 High | Oct 11, 2022 |
| CVE-2022-36325 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface | 6.8 Medium | Aug 10, 2022 |
| CVE-2022-36324 | Affected devices do not properly handle the renegotiation of SSL/TLS parameters | 7.5 High | Aug 10, 2022 |
| CVE-2022-36323 | Affected devices do not properly sanitize an input field | 9.1 Critical | Aug 10, 2022 |
| CVE-2022-26649 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… | 9.6 Critical | Jul 12, 2022 |
| CVE-2022-26648 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… | 8.2 High | Jul 12, 2022 |
| CVE-2022-26647 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All… | 8.8 High | Jul 12, 2022 |
| CVE-2022-0778 | The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for… | Not rated | Mar 15, 2022 |
| CVE-2021-3712 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding… | Not rated | Aug 24, 2021 |
| CVE-2020-28400 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… | 7.5 High | Jul 13, 2021 |
| CVE-2021-25669 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions <… | Not rated | Apr 22, 2021 |
| CVE-2021-25668 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions <… | Not rated | Apr 22, 2021 |
| CVE-2019-19301 | A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE… | 7.5 High | Apr 14, 2020 |
| CVE-2019-13946 | Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple… | 7.5 High | Feb 11, 2020 |
| CVE-2019-6569 | The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into… | Not rated | Mar 26, 2019 |
| CVE-2017-12736 | After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under… | 8.8 High | Dec 26, 2017 |
Other Siemens products
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 1132
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 1132
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 1132
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 952
RUGGEDCOM RST2428P 326
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 247
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 221
SIMATIC CN 4100 187
JT2Go 153
RUGGEDCOM APE1808 99
Teamcenter Visualization 95
RUGGEDCOM ROX RX1536 91