Known vulnerabilities in SCALANCE MUM856-1 (RoW)
Vendor:
Siemens
Software:
SCALANCE MUM856-1 (RoW)
Software CPE:
cpe:2.3:h:siemens:scalance_mum856-1_row:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU83420 - Resource exhaustion CVE-2023-44321 |
CWE-400 | Low | - | 22.11.2023 |
SB2023112223 SB2023121423 SB2024031320 |
||
| #VU83418 - Direct Request ('Forced Browsing') CVE-2023-44320 |
CWE-425 | Low | - | 22.11.2023 |
SB2023112223 SB2023121423 |
||
| #VU83416 - Use of Hard-coded Cryptographic Key CVE-2023-44318 |
CWE-321 | Low | - | 22.11.2023 |
SB2023112223 SB2023121423 SB2024031320 and 1 more |
||
| #VU70424 - Improper input validation CVE-2022-46143 |
CWE-20 | Low | 8.0 | 19.12.2022 |
SB2022121925 SB2023121421 |
||
| #VU70423 - Storing Passwords in a Recoverable Format CVE-2022-46142 |
CWE-257 | Low | - | 19.12.2022 |
SB2022121925 |
||
| #VU70422 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-46140 |
CWE-327 | Medium | - | 19.12.2022 |
SB2022121924 |
||
| #VU65274 - Improper Control of Generation of Code ('Code Injection') CVE-2022-34821 |
CWE-94 | Low | - | 13.07.2022 |
SB2022071333 SB2022121923 |