Known vulnerabilities in SCALANCE M-800 / S615

Known vulnerabilities in SCALANCE M-800 / S615

Vendor: Siemens

Software: SCALANCE M-800 / S615

Software CPE: cpe:2.3:h:siemens:scalance_m-800_s615:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU66369 - Allocation of Resources Without Limits or Throttling CVE-2022-36324	CWE-770	Medium	No	No	-	10.08.2022	SB2022081043
#VU66368 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2022-36323	CWE-74	Low	No	No	-	10.08.2022	SB2022081042 SB2023121421 SB2024061413
#VU66367 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36325	CWE-79	Low	No	No	-	10.08.2022	SB2022081042
#VU51378 - Stack-based buffer overflow CVE-2021-25667	CWE-121	Medium	No	No	-	10.03.2021	SB2021031012
#VU51377 - Improper Restriction of Excessive Authentication Attempts CVE-2021-25676	CWE-307	Medium	No	No	-	10.03.2021	SB2021031011
#VU49150 - Use of Insufficiently Random Values CVE-2020-25705	CWE-330	Medium	Available	No	6.4	17.11.2020	SB2020111734 SB2020122413 SB2021031802 and 24 more
#VU25270 - Resource exhaustion CVE-2019-13946	CWE-400	Medium	No	No	4.3	12.02.2020	SB2020021219
#VU24916 - Memory corruption CVE-2020-8597	CWE-119	High	Available	No	6.3	04.02.2020	SB2020020417 SB2020022109 SB2020022301 and 19 more