Known vulnerabilities in SCALANCE XR326-2C PoE WG

Vendor: Siemens
Software: SCALANCE XR326-2C PoE WG
Software CPE: cpe:2.3:h:siemens:scalance_xr326-2c_poe_wg:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE XR326-2C PoE WG SCALANCE XR326-2C PoE WG is affected by 19 known vulnerabilities: 10 medium, 9 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83426 - Improper Access Control
CVE-2023-44374		 CWE-284 Medium
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-44373		 CWE-74 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83424 - Unchecked Return Value
CVE-2023-44322		 CWE-252 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
#VU83420 - Resource exhaustion
CVE-2023-44321		 CWE-400 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
#VU83418 - Direct Request ('Forced Browsing')
CVE-2023-44320		 CWE-425 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
#VU83417 - Use of Weak Hash
CVE-2023-44319		 CWE-328 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121421
SB2024061413
#VU83416 - Use of Hard-coded Cryptographic Key
CVE-2023-44318		 CWE-321 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121423
SB2024031320
and 1 more
#VU83415 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2023-44317		 CWE-349 Low
No
No
 4.5 22.11.2023 SB2023112223
SB2023121344
SB2024061413
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 4.5 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401		 CWE-476 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217		 CWE-476 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216		 CWE-763 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71994 - Out-of-bounds read
CVE-2022-4203		 CWE-125 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 4.5 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU70424 - Improper input validation
CVE-2022-46143		 CWE-20 Low
No
No
 - 19.12.2022 SB2022121925
SB2023121421
#VU70423 - Storing Passwords in a Recoverable Format
CVE-2022-46142		 CWE-257 Low
No
No
 - 19.12.2022 SB2022121925
#VU70422 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-46140		 CWE-327 Medium
No
No
 - 19.12.2022 SB2022121924
#VU68289 - Missing Authorization
CVE-2022-31765		 CWE-862 Medium
No
No
 - 13.10.2022 SB2022101316