Known vulnerabilities in SCALANCE W1750D

Vendor: Siemens
Software: SCALANCE W1750D
Software CPE: cpe:2.3:h:siemens:scalance_w1750d:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 31
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE W1750D SCALANCE W1750D is affected by 31 known vulnerabilities: 6 high, 9 medium, 16 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57136 - Use of Externally-Controlled Format String
CVE-2021-37735		 CWE-134 Low
No
No
 8.7.1.3 07.10.2021 SB2021100720
SB2021111004
#VU57135 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-37734		 CWE-22 Low
No
No
 - 07.10.2021 SB2021100720
SB2021111005
#VU57134 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-37732		 CWE-78 Low
No
No
 8.7.1.3 07.10.2021 SB2021100720
SB2021111004
#VU57133 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-37730		 CWE-78 Low
No
No
 - 07.10.2021 SB2021100720
SB2021111005
#VU57132 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-37727		 CWE-78 Low
No
No
 - 07.10.2021 SB2021100720
SB2021111005
#VU57099 - Memory corruption
CVE-2021-37726		 CWE-119 High
No
No
 8.7.1.3 06.10.2021 SB2021100720
SB2021111004
#VU53269 - Command injection
CVE-2021-25162		 CWE-77 Medium
Available
No
 - 14.05.2021 SB2021030965
SB2021051408
#VU53267 - Improper input validation
CVE-2021-25159		 CWE-20 Low
No
No
 - 14.05.2021 SB2021030963
SB2021051408
#VU53265 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25157		 CWE-200 Low
No
No
 - 14.05.2021 SB2021033030
SB2021051408
#VU53264 - Improper input validation
CVE-2021-25156		 CWE-20 Low
No
No
 - 14.05.2021 SB2021033029
SB2021051408
#VU53258 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-25161		 CWE-79 Low
No
No
 - 14.05.2021 SB2021033031
SB2021051408
#VU53257 - Improper Access Control
CVE-2021-25155		 CWE-284 Low
Available
No
 - 14.05.2021 SB2021033028
SB2021051408
#VU53256 - Command injection
CVE-2021-25150		 CWE-77 Medium
No
No
 - 14.05.2021 SB2021033027
SB2021051408
#VU53255 - Improper Access Control
CVE-2021-25148		 CWE-284 Medium
No
No
 - 14.05.2021 SB2021033025
SB2021051408
#VU53254 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25145		 CWE-200 Low
No
No
 - 14.05.2021 SB2021033023
SB2021051408
#VU53253 - Improper input validation
CVE-2021-25143		 CWE-20 Medium
No
No
 - 14.05.2021 SB2021032926
SB2021051408
#VU53251 - Command injection
CVE-2021-25146		 CWE-77 Low
No
No
 - 14.05.2021 SB2021033024
SB2021051408
#VU53250 - Command injection
CVE-2020-24635		 CWE-77 Low
No
No
 - 14.05.2021 SB2021032924
SB2021051408
#VU53249 - Memory corruption
CVE-2021-25149		 CWE-119 High
No
No
 - 14.05.2021 SB2021033026
SB2021051408
#VU53248 - Memory corruption
CVE-2021-25144		 CWE-119 High
No
No
 - 14.05.2021 SB2021032927
SB2021051408


Showing elements 1 - 20 out of 31