Siemens SCALANCE M876-4
28 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-40833 | | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an | HIGH 8.7 | 0.3 % | ||
| CVE-2025-23384 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NA | MEDIUM 6.3 | 0.3 % | ||
| CVE-2024-50572 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 8.6 | 0.7 % | ||
| CVE-2024-50561 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | MEDIUM 5.1 | 0.3 % | ||
| CVE-2024-50560 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | LOW 2.3 | 0.3 % | ||
| CVE-2024-50559 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | MEDIUM 5.1 | 0.3 % | ||
| CVE-2024-50558 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-50557 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 8.6 | 0.9 % | ||
| CVE-2024-41978 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 7.1 | 0.5 % | ||
| CVE-2024-41977 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 7.3 | 0.4 % | ||
| CVE-2024-41976 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 8.6 | 0.8 % | ||
| CVE-2023-49692 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NA | HIGH 7.2 | 0.6 % | ||
| CVE-2023-49691 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 7.2 | 0.6 % | ||
| CVE-2023-44374 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM | HIGH 7.1 | 0.7 % | ||
| CVE-2023-44373 | | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges | CRITICAL 9.4 | 1.3 % | ||
| CVE-2023-44322 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM | MEDIUM 5.9 | 0.9 % | ||
| CVE-2023-44321 | | Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing a | MEDIUM 5.1 | 1.0 % | ||
| CVE-2023-44320 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NA | MEDIUM 4.3 | 0.6 % | ||
| CVE-2023-44319 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM | MEDIUM 6.9 | 0.4 % | ||
| CVE-2023-44318 | | Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allo | MEDIUM 6.9 | 0.7 % | ||
| CVE-2023-44317 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NA | HIGH 8.6 | 0.4 % | ||
| CVE-2022-46143 | | Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer | MEDIUM 5.1 | 0.7 % | ||
| CVE-2022-46142 | | Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the fil | MEDIUM 5.2 | 0.3 % | ||
| CVE-2022-46140 | | Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the conte | HIGH 7.1 | 0.2 % | ||
| CVE-2022-31766 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NA | HIGH 8.6 | 1.2 % | ||
| CVE-2022-31765 | | Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to esca | HIGH 8.8 | 1.1 % | ||
| CVE-2022-34821 | | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), | HIGH 8.8 | 2.4 % | ||
| CVE-2020-28400 | | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability | HIGH 8.7 | 1.9 % |