Known vulnerabilities in SCALANCE XF204

Vendor: Siemens

Software: SCALANCE XF204

Software CPE: cpe:2.3:h:siemens:scalance_xf204:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 31

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (31)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU83426 - Improper Access Control CVE-2023-44374	CWE-284	Medium	No	No	4.5	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2023-44373	CWE-74	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83424 - Unchecked Return Value CVE-2023-44322	CWE-252	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121421
#VU83420 - Resource exhaustion CVE-2023-44321	CWE-400	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121423 SB2024031320
#VU83418 - Direct Request ('Forced Browsing') CVE-2023-44320	CWE-425	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121423
#VU83417 - Use of Weak Hash CVE-2023-44319	CWE-328	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83416 - Use of Hard-coded Cryptographic Key CVE-2023-44318	CWE-321	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121423 SB2024031320 and 1 more
#VU83415 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2023-44317	CWE-349	Low	No	No	4.5	22.11.2023	SB2023112223 SB2023121344 SB2024061413
#VU76651 - Resource Management Errors CVE-2023-2650	CWE-399	Medium	No	No	4.5	30.05.2023	SB2023053040 SB2023053044 SB2023053045 and 131 more
#VU75043 - Out-of-bounds write CVE-2020-28895	CWE-787	High	No	No	5.2.6	12.04.2023	SB2021020342 SB2023041257
#VU71999 - NULL Pointer Dereference CVE-2023-0401	CWE-476	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020774 and 52 more
#VU71998 - NULL Pointer Dereference CVE-2023-0217	CWE-476	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020774 and 49 more
#VU71997 - Release of invalid pointer or reference CVE-2023-0216	CWE-763	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020774 and 50 more
#VU71996 - Double Free CVE-2022-4450	CWE-415	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020771 and 180 more
#VU71994 - Out-of-bounds read CVE-2022-4203	CWE-125	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020774 and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304	CWE-208	Medium	No	No	4.5	07.02.2023	SB2023020742 SB2023020748 SB2023020767 and 222 more
#VU70424 - Improper input validation CVE-2022-46143	CWE-20	Low	No	No	-	19.12.2022	SB2022121925 SB2023121421
#VU70423 - Storing Passwords in a Recoverable Format CVE-2022-46142	CWE-257	Low	No	No	-	19.12.2022	SB2022121925
#VU70422 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-46140	CWE-327	Medium	No	No	-	19.12.2022	SB2022121924
#VU62510 - Improper input validation CVE-2020-35198	CWE-20	High	No	No	5.2.6	22.04.2022	SB2022042252 SB2023041257

Showing elements 1 - 20 out of 31

Known vulnerabilities in SCALANCE XF204

Breakdown by Severity Chart

Vulnerabilities (31)

Please verify you're human