Advisories · Technology

Siemens SCALANCE X204-2FM.

Every CVE that names Siemens SCALANCE X204-2FM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-40631 CVE record

Cross-site scripting in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Cross-site scripting (XSS)
Not analysed yet 11 Oct 2022
CVE-2022-26649 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Buffer overflow in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Memory corruption
Not analysed yet 12 Jul 2022
CVE-2022-26648 CVE record

CVSS 8.2 High

Buffer overflow in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Memory corruption
Not analysed yet 12 Jul 2022
CVE-2022-26647 CVE record

CVSS 8.8 High

Insufficiently random values in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Weak cryptography or TLS
Not analysed yet 12 Jul 2022
CVE-2021-25669 CVE record

Stack-based buffer overflow in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2021-25668 CVE record

Heap-based buffer overflow in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2019-19301 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Siemens SCALANCE X200-4P IRT and others
- Siemens SCALANCE X200-4P IRT
- Siemens SCALANCE X201-3P IRT
- Denial of service
Not analysed yet 14 Apr 2020
CVE-2019-6569 CVE record

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network.
- Siemens SCALANCE X204-2
- Siemens SCALANCE X204-2FM
- CWE-440
Not analysed yet 26 Mar 2019