Siemens Scalance Xb213 3 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Siemens Scalance Xb213 3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-25226siemensscalance x-200 switch family (incl. siplus net variants)+55
EPSS score1.74%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore.CVE-2020-28391siemensscalance x-200 switch family (incl. siplus net variants)+56EPSS score1.13%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.CVE-2020-15800siemensscalance x-200 switch family (incl. siplus net variants)+56EPSS score1.67%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily.CVE-2020-15799siemensscalance x-200 switch family (incl. siplus net variants)+55EPSS score1.09%
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.CVE-2022-46142siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.27%
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.CVE-2022-46143siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+183EPSS score0.75%
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.CVE-2022-46140siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.25%
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.