Known vulnerabilities in SCALANCE XR552-12M

Vendor: Siemens
Software CPE: cpe:2.3:h:siemens:scalance_xr552-12m:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SCALANCE XR552-12M SCALANCE XR552-12M is affected by 13 known vulnerabilities: 1 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
6.6.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
6.6.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
6.6.1 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
6.6.1 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
6.6.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
6.6.1 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
6.6.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70424 - Improper input validation
CVE-2022-46143
CWE-20 Low
No
No
- 19.12.2022 SB2022121925
SB2023121421
#VU70423 - Storing Passwords in a Recoverable Format
CVE-2022-46142
CWE-257 Low
No
No
- 19.12.2022 SB2022121925
#VU70422 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-46140
CWE-327 Medium
No
No
- 19.12.2022 SB2022121924
#VU68289 - Missing Authorization
CVE-2022-31765
CWE-862 Medium
No
No
- 13.10.2022 SB2022101316
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
6.6.1 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64413 - Improper Validation of Integrity Check Value
CVE-2021-37182
CWE-354 Medium
No
No
6.5 15.06.2022 SB2022061523