CVE-2020-25705

CVE-2020-25705 is a Linux kernel ICMP handling flaw that lets an off-path attacker bypass UDP source port randomization and rapidly scan open UDP ports. Affected products include various kernel versions and embedded/Linux-based devices; remediation is via kernel updates (e.g., CentOS/AlmaLinux ad...

Siemens SCALANCE W 1750D

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE W 1750D Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...

Vulnerabilities fixed in Siemens Ruggedcom and Scalance

Siemens has fixed multiple vulnerabilities in several Ruggedcom and Scalance products. A remote malicious person could potentially exploit the vulnerabilities to cause a denial-of-service of dnsmasq or execute arbitrary code. To do this requires sending malicious network traffic to the vulnerable...

Siemens SCALANCE, RUGGEDCOM

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE, RUGGEDCOM Vulnerability: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain unauthenticated access...

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software, related to uncontrolled resource consumption (exhaustion), allows a intruder to trigger a service failure.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow a malicious actor to trigger service failures using specially created packets sent to port 443/tcp...

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption (exhaustion), which allows attackers to trigger a service failure of the web server.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow a malicious actor to trigger a service failure of the web server using specially created packets sent to port...

Siemens Dk Uncontrolled Resource Consumption

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller All versions, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 All Versions V4.5, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P All Versions V4.6, PROFINET...

Multiple Siemens Products Resource Management Error Vulnerability (CNVD-2020-23036)

Siemens SCALANCE X-200, SCALANCE X-200IRT and SCALANCE X-300 are industrial switch products. A resource management error vulnerability exists in multiple Siemens products that can be exploited by attackers to cause a denial of service...

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

Code injection

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

CVE-2019-19301

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

CVE-2019-19301

CVE-2019-19301 affects Siemens SCALANCE and SIMATIC Profinet devices (broad SCALANCE X200/X300 series and related modules) where the VxWorks-based Profinet TCP stack can be forced to perform very expensive calls for every incoming packet, enabling a Denial of Service. Affected components are Prof...

PT-2020-10128 · Siemens · Scalance Xr324-4M Poe +46

Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT SCALANCE X201-3P IRT SCALANCE X201-3P IRT PRO SCALANCE X202-2IRT SCALANCE X202-2P IRT SCALANCE X202-2P IRT PRO SCALANCE X204-2 SCALANCE X204-2FM SCALANCE X204-2LD SCALANCE X204-2LD TS SCALANCE X204-2TS SCALANCE X204IRT...

CVE-2019-19301: Uncontrolled Resource Consumption

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALAN...

Siemens SCALANCE and SIMATIC (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE, SIMATIC Vulnerability: Resource Exhaustion 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-105-07 Siemens SCALANCE & SIMATIC...

Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment : RUGGEDCOM, SCALANCE, SIMATIC, SINEMA Vulnerabilities: Uncontrolled Resource Consumption, Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to...

The vulnerability of the microprogramming software of Siemens SCALANCE SC-600 allows a intruder to execute arbitrary code.

The vulnerability of Siemens SCALANCE SC-600 industrial transceivers’ microprogramming software is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an intruder to execute arbitrary code...

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces allows a intruder to gain unauthorized access to protected information.

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces lies in the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2019-6585

A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. The integrated configuration web server of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User...