Siemens SCALANCE W1788-2 M12
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-40833 | | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an | HIGH 8.7 | 0.3 % | ||
| CVE-2024-30191 | * | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788- | HIGH 8.4 | 0.2 % | ||
| CVE-2024-30190 | * | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788- | MEDIUM 6.1 | 0.2 % | ||
| CVE-2022-46142 | | Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the fil | MEDIUM 5.2 | 0.3 % | ||
| CVE-2022-46140 | | Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the conte | HIGH 7.1 | 0.2 % | ||
| CVE-2022-31765 | | Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to esca | HIGH 8.8 | 1.1 % | ||
| CVE-2022-36325 | | Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated rem | MEDIUM 6.8 | 1.0 % | ||
| CVE-2022-36324 | | Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypa | HIGH 7.5 | 1.8 % | ||
| CVE-2022-36323 | | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges | CRITICAL 9.1 | 1.9 % | ||
| CVE-2022-28329 | All versions < V3.0.0 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALA | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-28328 | All versions < V3.0.0 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALA | HIGH 7.5 | 0.9 % | ||
| CVE-2022-27481 | All versions < V3.0.0 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALA | MEDIUM 5.3 | 0.2 % | ||
| CVE-2020-28400 | | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability | HIGH 8.7 | 1.9 % |