Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

siemens scalance xr326-2c poe wg firmware vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3

CVE-2020-28395

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could l...
Siemens Scalance Xr324-12m FirmwareSiemens Scalance Xr324-12m Ts FirmwareSiemens Scalance Xr324-4m Eec FirmwareSiemens Scalance Xr324-4m Poe FirmwareSiemens Scalance Xr324-4m Poe Ts FirmwareSiemens Scalance Xr324wg FirmwareSiemens Scalance Xr326-2c Poe Wg FirmwareSiemens Scalance Xr328-4c Wg Firmware
7.2
CVSSv3

CVE-2023-44317

Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device.
Siemens Scalance Xb208 (e/ip) Firmware -Siemens Scalance Xb208 (pn) Firmware -Siemens Scalance Xb216 (e/ip) Firmware -Siemens Scalance Xb216 (pn) Firmware -Siemens Scalance Xc206-2 (sc) Firmware -Siemens Scalance Xc206-2 (st/bfoc) Firmware -Siemens Scalance Xc206-2g Poe Firmware -Siemens Scalance Xc206-2g Poe (54 V Dc) Firmware -Siemens Scalance Xc206-2g Poe Eec (54 V Dc) Firmware -Siemens Scalance Xc206-2sfp Firmware -Siemens Scalance Xc206-2sfp Eec Firmware -Siemens Scalance Xc206-2sfp G Firmware -Siemens Scalance Xc206-2sfp G (eip Def.) Firmware -Siemens Scalance Xc206-2sfp G Eec Firmware -Siemens Scalance Xc208 Firmware -Siemens Scalance Xc208eec Firmware -Siemens Scalance Xc208g Firmware -Siemens Scalance Xc208g (eip Def.) Firmware -Siemens Scalance Xc208g Eec Firmware -Siemens Scalance Xc208g Poe Firmware -Siemens Scalance Xc208g Poe (54 V Dc) Firmware -Siemens Scalance Xc216 Firmware -
7.5
CVSSv3

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote malicious user to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance W700 Ieee 802.11ax FirmwareSiemens Scalance W700 Ieee 802.11n FirmwareSiemens Scalance W700 Ieee 802.11ac FirmwareSiemens Scalance Xb-200 FirmwareSiemens Scalance Xb205-3 FirmwareSiemens Scalance Xb205-3ld FirmwareSiemens Scalance Xb208 FirmwareSiemens Scalance Xb213-3 FirmwareSiemens Scalance Xb213-3ld FirmwareSiemens Scalance Xb216 FirmwareSiemens Scalance Xc-200 FirmwareSiemens Scalance Xc206-2 FirmwareSiemens Scalance Xc206-2g Poe FirmwareSiemens Scalance Xc206-2g Poe Eec FirmwareSiemens Scalance Xc206-2sfp Eec FirmwareSiemens Scalance Xc206-2sfp G FirmwareSiemens Scalance Xc206-2sfp G (e/ip) FirmwareSiemens Scalance Xc206-2sfp G Eec FirmwareSiemens Scalance Xc208 FirmwareSiemens Scalance Xc208eec Firmware
9.1
CVSSv3

CVE-2022-36323

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c FirmwareSiemens Scalance Sc632-2c FirmwareSiemens Scalance Sc636-2c FirmwareSiemens Scalance Sc642-2c FirmwareSiemens Scalance Sc646-2c FirmwareSiemens Scalance W700 Ieee 802.11ax FirmwareSiemens Scalance W700 Ieee 802.11n FirmwareSiemens Scalance W700 Ieee 802.11ac FirmwareSiemens Scalance Xb-200 FirmwareSiemens Scalance Xb205-3 FirmwareSiemens Scalance Xb205-3ld FirmwareSiemens Scalance Xb208 FirmwareSiemens Scalance Xb213-3 FirmwareSiemens Scalance Xb213-3ld FirmwareSiemens Scalance Xb216 FirmwareSiemens Scalance Xc-200 FirmwareSiemens Scalance Xc206-2 FirmwareSiemens Scalance Xc206-2g Poe FirmwareSiemens Scalance Xc206-2g Poe Eec Firmware
4.8
CVSSv3

CVE-2022-36325

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c FirmwareSiemens Scalance Sc632-2c FirmwareSiemens Scalance Sc636-2c FirmwareSiemens Scalance Sc642-2c FirmwareSiemens Scalance Sc646-2c FirmwareSiemens Scalance W700 Ieee 802.11ax FirmwareSiemens Scalance W700 Ieee 802.11n FirmwareSiemens Scalance W700 Ieee 802.11ac FirmwareSiemens Scalance Xb-200 FirmwareSiemens Scalance Xb205-3 FirmwareSiemens Scalance Xb205-3ld FirmwareSiemens Scalance Xb208 FirmwareSiemens Scalance Xb213-3 FirmwareSiemens Scalance Xb213-3ld FirmwareSiemens Scalance Xb216 FirmwareSiemens Scalance Xc-200 FirmwareSiemens Scalance Xc206-2 FirmwareSiemens Scalance Xc206-2g Poe FirmwareSiemens Scalance Xc206-2g Poe Eec Firmware
6.5
CVSSv3

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated malicious user to decrypt the contents of the file and retrieve debug information about the system.
Siemens Ruggedcom Rm1224 Lte(4g) Eu FirmwareSiemens Ruggedcom Rm1224 Lte(4g) Nam FirmwareSiemens Scalance M804pb FirmwareSiemens Scalance M812-1 Adsl-router FirmwareSiemens Scalance M816-1 Adsl-router FirmwareSiemens Scalance M826-2 Shdsl-router FirmwareSiemens Scalance M874-2 FirmwareSiemens Scalance M874-3 FirmwareSiemens Scalance M876-3 FirmwareSiemens Scalance M876-4 FirmwareSiemens Scalance Mum853-1 FirmwareSiemens Scalance Mum856-1 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance S615 Eec FirmwareSiemens Scalance Sc622-2c FirmwareSiemens Scalance Sc626-2c FirmwareSiemens Scalance Sc632-2c FirmwareSiemens Scalance Sc636-2c FirmwareSiemens Scalance Sc642-2c FirmwareSiemens Scalance Sc646-2c FirmwareSiemens Scalance W721-1 Rj45 FirmwareSiemens Scalance W722-1 Rj45 Firmware
5.7
CVSSv3

CVE-2022-46142

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
Siemens Ruggedcom Rm1224 Lte(4g) Eu FirmwareSiemens Ruggedcom Rm1224 Lte(4g) Nam FirmwareSiemens Scalance M804pb FirmwareSiemens Scalance M812-1 Adsl-router FirmwareSiemens Scalance M816-1 Adsl-router FirmwareSiemens Scalance M826-2 Shdsl-router FirmwareSiemens Scalance M874-2 FirmwareSiemens Scalance M874-3 FirmwareSiemens Scalance M876-3 FirmwareSiemens Scalance M876-4 FirmwareSiemens Scalance Mum853-1 FirmwareSiemens Scalance Mum856-1 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance S615 Eec FirmwareSiemens Scalance Sc622-2c FirmwareSiemens Scalance Sc626-2c FirmwareSiemens Scalance Sc632-2c FirmwareSiemens Scalance Sc636-2c FirmwareSiemens Scalance Sc642-2c FirmwareSiemens Scalance Sc646-2c FirmwareSiemens Scalance W721-1 Rj45 FirmwareSiemens Scalance W722-1 Rj45 Firmware
2.7
CVSSv3

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated malicious user to read from an uninitialized buffer that potentially contains previously allocated data.
Siemens Ruggedcom Rm1224 Lte(4g) Eu FirmwareSiemens Ruggedcom Rm1224 Lte(4g) Nam FirmwareSiemens Scalance M804pb FirmwareSiemens Scalance M812-1 Adsl-router FirmwareSiemens Scalance M816-1 Adsl-router FirmwareSiemens Scalance M826-2 Shdsl-router FirmwareSiemens Scalance M874-2 FirmwareSiemens Scalance M874-3 FirmwareSiemens Scalance M876-3 FirmwareSiemens Scalance M876-4 FirmwareSiemens Scalance Mum853-1 FirmwareSiemens Scalance Mum856-1 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance S615 Eec FirmwareSiemens Scalance Sc622-2c FirmwareSiemens Scalance Sc626-2c FirmwareSiemens Scalance Sc632-2c FirmwareSiemens Scalance Sc636-2c FirmwareSiemens Scalance Sc642-2c FirmwareSiemens Scalance Sc646-2c FirmwareSiemens Scalance W721-1 Rj45 FirmwareSiemens Scalance W722-1 Rj45 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28995CVE-2024-36680CVE-2024-35537unauthorizedCVE-2024-21518CVE-2024-37673cross-site scriptingSSRFCVE-2024-6241
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook