Siemens Scalance X204Rna Ecc vulnerabilities

2 vulnerabilities

Known vulnerabilities in Siemens Scalance X204Rna Ecc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2003-0190debianopenssh+4
EPSS score
76.75%
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.7.8CVE-2019-16905debianopenssh+5
EPSS score
2.23%
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.