Siemens Scalance Xr328 4C Wg vulnerabilities

4 vulnerabilities

Known vulnerabilities in Siemens Scalance Xr328 4C Wg, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2020-28395siemensscalance x-200rna switch family+9
EPSS score
1.19%
A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.5.7CVE-2022-46142siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174
EPSS score
0.27%
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.5.1CVE-2022-46143siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+183
EPSS score
0.75%
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.7.1CVE-2022-46140siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174
EPSS score
0.25%
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.