Known vulnerabilities in SCALANCE XF202-2P IRT

Known vulnerabilities in SCALANCE XF202-2P IRT

Vendor: Siemens

Software: SCALANCE XF202-2P IRT

Software CPE: cpe:2.3:h:siemens:scalance_xf202-2p_irt:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 14

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU75043 - Out-of-bounds write CVE-2020-28895	CWE-787	High	No	No	5.5.2	12.04.2023	SB2021020342 SB2023041257
#VU75031 - Inadequate Encryption Strength CVE-2023-29054	CWE-326	Medium	No	No	5.5.2	12.04.2023	SB2023041234
#VU68262 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-40631	CWE-79	Low	No	No	5.5.0	12.10.2022	SB2022101246
#VU65296 - Memory corruption CVE-2022-26649	CWE-119	Medium	No	No	-	14.07.2022	SB2022071408
#VU65295 - Memory corruption CVE-2022-26648	CWE-119	Low	No	No	-	14.07.2022	SB2022071408
#VU65293 - Use of Insufficiently Random Values CVE-2022-26647	CWE-330	High	No	No	-	14.07.2022	SB2022071408
#VU62510 - Improper input validation CVE-2020-35198	CWE-20	High	No	No	5.5.2	22.04.2022	SB2022042252 SB2023041257
#VU54867 - Allocation of Resources Without Limits or Throttling CVE-2020-28400	CWE-770	Medium	No	No	5.5.0	14.07.2021	SB2021071416
#VU52215 - Stack-based buffer overflow CVE-2021-25669	CWE-121	High	No	No	5.5.1	14.04.2021	SB2021041413
#VU52214 - Heap-based Buffer Overflow CVE-2021-25668	CWE-122	High	No	No	5.5.1	14.04.2021	SB2021041413
#VU14163 - NULL Pointer Dereference CVE-2016-10708	CWE-476	Low	No	No	-	31.07.2018	SB2017032008 SB2018072801 SB2018012101 and 7 more
#VU2068 - Permissions, Privileges, and Access Controls CVE-2016-10011	CWE-264	Low	No	No	-	21.12.2016	SB2016122003 SB2016122201 SB2016122401 and 9 more
#VU252 - Resource exhaustion CVE-2016-6515	CWE-400	Medium	Available	No	-	02.08.2016	SB2016080201 SB2016080202 SB2016080203 and 11 more
#VU49578 - Resource exhaustion CVE-2007-5846	CWE-400	Medium	No	No	5.5.0	06.11.2007	SB2007110601 SB2023022247 SB2007112002