Known vulnerabilities in SCALANCE XB216

Vendor: Siemens
Software: SCALANCE XB216
Software CPE: cpe:2.3:h:siemens:scalance_xb216:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE XB216 SCALANCE XB216 is affected by 16 known vulnerabilities: 9 medium, 7 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83426 - Improper Access Control
CVE-2023-44374		 CWE-284 Medium
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-44373		 CWE-74 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83424 - Unchecked Return Value
CVE-2023-44322		 CWE-252 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
#VU83420 - Resource exhaustion
CVE-2023-44321		 CWE-400 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
#VU83418 - Direct Request ('Forced Browsing')
CVE-2023-44320		 CWE-425 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
#VU83417 - Use of Weak Hash
CVE-2023-44319		 CWE-328 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83416 - Use of Hard-coded Cryptographic Key
CVE-2023-44318		 CWE-321 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
and 1 more
#VU83415 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2023-44317		 CWE-349 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121344
SB2024061413
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 4.5 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401		 CWE-476 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217		 CWE-476 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216		 CWE-763 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71994 - Out-of-bounds read
CVE-2022-4203		 CWE-125 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU68289 - Missing Authorization
CVE-2022-31765		 CWE-862 Medium
No
No
 - 13.10.2022 SB2022101316