Scalance S615 Firmware (Siemens) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2024-11-12. Vendor: Siemens.

CVEs of Scalance S615 Firmware

CVE-2024-50572 - CVSS 8.6 (high), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50561 - CVSS 6.1 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50560 - CVSS 4.3 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50559 - CVSS 5.1 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50558 - CVSS 5.3 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50557 - CVSS 9.8 (critical), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2022-46143 - CVSS 5.1 (medium), 2022-12-13: Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially…
CVE-2022-46142 - CVSS 5.7 (medium), 2022-12-13: Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the…
CVE-2022-46140 - CVSS 7.1 (high), 2022-12-13: Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file…
CVE-2022-31766 - CVSS 8.6 (high), 2022-10-11: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2022-36323 - CVSS 9.1 (critical), 2022-08-10: Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or…
CVE-2022-36325 - CVSS 6.8 (medium), 2022-08-10: Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with…
CVE-2022-36324 - CVSS 7.5 (high), 2022-08-10: Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute…
CVE-2021-22924 - CVSS 3.7 (low), 2021-08-05: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic,…
CVE-2020-28400 - CVSS 8.7 (high), 2021-07-13: Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered…
CVE-2021-3449 - CVSS 5.9 (medium), 2021-03-25: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits…
CVE-2021-25676 - CVSS 7.5 (high), 2021-03-15: A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and <…
CVE-2021-25667 - CVSS 8.8 (high), 2021-03-15: A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615…
CVE-2019-13946 - CVSS 7.5 (high), 2020-02-11: Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are…
CVE-2018-5391 - CVSS 7.5 (high), 2018-09-06: The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.…
CVE-2017-14491 - CVSS 9.8 (critical), 2017-10-04: Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS…
CVE-2017-2681 - CVSS 7.1 (high), 2017-05-11: Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that…
CVE-2017-2680 - CVSS 7.1 (high), 2017-05-11: Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human…
CVE-2016-7090 - CVSS 4 (medium), 2016-09-29: The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https…