Siemens SCALANCE W721-1 RJ45
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-40833 | | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an | HIGH 8.7 | 0.3 % | ||
| CVE-2024-30191 | | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788- | HIGH 8.4 | 0.2 % | ||
| CVE-2024-30190 | | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788- | MEDIUM 6.1 | 0.2 % | ||
| CVE-2024-30189 | * | A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) ( | MEDIUM 6.1 | 0.2 % | ||
| CVE-2023-44373 | | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges | CRITICAL 9.4 | 1.3 % | ||
| CVE-2022-46142 | | Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the fil | MEDIUM 5.2 | 0.3 % | ||
| CVE-2022-46140 | | Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the conte | HIGH 7.1 | 0.2 % | ||
| CVE-2022-31765 | | Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to esca | HIGH 8.8 | 1.1 % | ||
| CVE-2022-36325 | | Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated rem | MEDIUM 6.8 | 1.0 % | ||
| CVE-2022-36324 | | Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypa | HIGH 7.5 | 1.8 % | ||
| CVE-2022-36323 | | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges | CRITICAL 9.1 | 1.9 % | ||
| CVE-2020-28400 | | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability | HIGH 8.7 | 1.9 % |