Known vulnerabilities in SCALANCE XC208G EEC

Vendor: Siemens
Software CPE: cpe:2.3:h:siemens:scalance_xc208g_eec:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE XC208G EEC SCALANCE XC208G EEC is affected by 19 known vulnerabilities: 10 medium, 9 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83426 - Improper Access Control
CVE-2023-44374
CWE-284 Medium
No
No
4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-44373
CWE-74 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83424 - Unchecked Return Value
CVE-2023-44322
CWE-252 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121421
#VU83420 - Resource exhaustion
CVE-2023-44321
CWE-400 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
#VU83418 - Direct Request ('Forced Browsing')
CVE-2023-44320
CWE-425 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121423
#VU83417 - Use of Weak Hash
CVE-2023-44319
CWE-328 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83416 - Use of Hard-coded Cryptographic Key
CVE-2023-44318
CWE-321 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
and 1 more
#VU83415 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2023-44317
CWE-349 Low
No
No
4.5 22.11.2023 SB2023112223
SB2023121344
SB2024061413
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
4.5 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401
CWE-476 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217
CWE-476 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216
CWE-763 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71994 - Out-of-bounds read
CVE-2022-4203
CWE-125 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU70424 - Improper input validation
CVE-2022-46143
CWE-20 Low
No
No
- 19.12.2022 SB2022121925
SB2023121421
#VU70423 - Storing Passwords in a Recoverable Format
CVE-2022-46142
CWE-257 Low
No
No
- 19.12.2022 SB2022121925
#VU70422 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-46140
CWE-327 Medium
No
No
- 19.12.2022 SB2022121924
#VU68289 - Missing Authorization
CVE-2022-31765
CWE-862 Medium
No
No
- 13.10.2022 SB2022101316