Known vulnerabilities in SCALANCE X-200 IRT

Vendor: Siemens
Software: SCALANCE X-200 IRT
Software CPE: cpe:2.3:h:siemens:scalance_x-200_irt:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE X-200 IRT SCALANCE X-200 IRT is affected by 12 known vulnerabilities: 2 high, 5 medium, 5 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49497 - Use of Hard-coded Cryptographic Key
CVE-2020-28391		 CWE-321 High
No
No
 - 12.01.2021 SB2021011305
#VU49499 - Missing Authentication for Critical Function
CVE-2020-15799		 CWE-306 Medium
No
No
 - 12.01.2021 SB2021011305
#VU49501 - Heap-based Buffer Overflow
CVE-2020-25226		 CWE-122 High
No
No
 - 12.01.2021 SB2021011305
#VU26963 - Resource exhaustion
CVE-2019-19301		 CWE-400 Medium
No
No
 - 15.04.2020 SB2020041517
#VU25270 - Resource exhaustion
CVE-2019-13946		 CWE-400 Medium
No
No
 5.3.0 12.02.2020 SB2020021219
#VU25260 - Protection Mechanism Failure
CVE-2019-13924		 CWE-693 Low
No
No
 - 12.02.2020 SB2020021209
#VU21932 - Improper input validation
CVE-2019-10923		 CWE-20 Medium
No
No
 5.2.1 18.10.2019 SB2019101012
#VU20349 -
CVE-2019-10942		 Medium
No
No
 - 21.08.2019 SB2019082106
#VU18822 - Storing Passwords in a Recoverable Format
CVE-2019-6567		 CWE-257 Low
No
No
 - 18.06.2019 SB2019061112
#VU13343 - Permissions, Privileges, and Access Controls
CVE-2018-4833		 CWE-264 Low
No
No
 - 14.06.2018 SB2018061503
#VU13333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4842		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061311
#VU13334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4848		 CWE-79 Low
No
No
 - 12.06.2018 SB2018061311