Advisories · Technology

Siemens SCALANCE X302-7 EEC (2x 230V, coated).

Every CVE that names Siemens SCALANCE X302-7 EEC (2x 230V, coated) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-26380 CVE record

Out-of-bounds read in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Memory corruption
Not analysed yet 12 Apr 2022
CVE-2022-26335 CVE record

Buffer overflow in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Memory corruption
Not analysed yet 12 Apr 2022
CVE-2022-26334 CVE record

Buffer overflow in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Memory corruption
Not analysed yet 12 Apr 2022
CVE-2022-25756 CVE record

Cross-site scripting in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2022
CVE-2022-25755 CVE record

Improper access control in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Broken access control
Not analysed yet 12 Apr 2022
CVE-2022-25754 CVE record

Cross-site request forgery in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Cross-site request forgery (CSRF)
Not analysed yet 12 Apr 2022
CVE-2022-25753 CVE record

Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Memory corruption
Not analysed yet 12 Apr 2022
CVE-2022-25752 CVE record

Insufficiently random values in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- Weak cryptography or TLS
Not analysed yet 12 Apr 2022
CVE-2022-25751 CVE record

Improper input validation in Siemens SCALANCE X302-7 EEC (230V) and others
- Siemens SCALANCE X302-7 EEC (230V)
- Siemens SCALANCE X302-7 EEC (230V, coated)
- CWE-20
Not analysed yet 12 Apr 2022
CVE-2019-13933 CVE record

Missing authentication in Siemens SCALANCE X204RNA (HSR) and others
- Siemens SCALANCE X204RNA (HSR)
- Siemens SCALANCE X204RNA (PRP)
- Authentication bypass
Not analysed yet 16 Jan 2020
CVE-2019-6569 CVE record

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network.
- Siemens SCALANCE X204-2
- Siemens SCALANCE X204-2FM
- CWE-440
Not analysed yet 26 Mar 2019