Siemens Scalance Xp216Poe EEC (V2) vulnerabilities
3 vulnerabilities
Known vulnerabilities in Siemens Scalance Xp216Poe EEC (V2), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-12736siemensruggedcom i800+252
EPSS score1.07%
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.CVE-2023-44321siemens6ag1206-2bb00-7ac2_firmware+179EPSS score1.00%
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.CVE-2023-44318siemens6ag1206-2bb00-7ac2_firmware+173EPSS score0.69%
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.