Scalance Wum766-1 Usa (Siemens) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-12. Vendor: Siemens.

CVEs of Scalance Wum766-1 Usa

CVE-2025-40833 - CVSS 8.7 (high), 2026-05-12: The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause…
CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2025-24499 - CVSS 7.5 (high), 2025-02-11: A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions <…
CVE-2025-24532 - CVSS 5.3 (medium), 2025-02-11: A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions <…
CVE-2024-50572 - CVSS 8.6 (high), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50561 - CVSS 6.1 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-50560 - CVSS 4.3 (medium), 2024-11-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2024-3596 - CVSS 9 (critical), 2024-07-09: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or…
CVE-2023-44373 - CVSS 9.4 (critical), 2023-11-14: Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or…
CVE-2023-44322 - CVSS 5.9 (medium), 2023-11-14: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2023-44374 - CVSS 8.8 (high), 2023-11-14: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2023-44319 - CVSS 6.9 (medium), 2023-11-14: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2023-44317 - CVSS 8.6 (high), 2023-11-14: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2023-44320 - CVSS 4.3 (medium), 2023-11-14: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2022-46142 - CVSS 5.7 (medium), 2022-12-13: Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the…
CVE-2022-46140 - CVSS 7.1 (high), 2022-12-13: Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file…
CVE-2022-46144 - CVSS 7.1 (high), 2022-12-13: A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >=…
CVE-2022-46143 - CVSS 5.1 (medium), 2022-12-13: Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially…
CVE-2022-31765 - CVSS 8.8 (high), 2022-10-11: Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their…
CVE-2022-31766 - CVSS 8.6 (high), 2022-10-11: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM…
CVE-2022-36323 - CVSS 9.1 (critical), 2022-08-10: Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or…
CVE-2022-36325 - CVSS 6.8 (medium), 2022-08-10: Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with…
CVE-2022-36324 - CVSS 7.5 (high), 2022-08-10: Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute…
CVE-2022-34821 - CVSS 9.8 (critical), 2022-07-12: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB…
CVE-2022-0778 - CVSS 7.5 (high), 2022-03-15: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…
CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
CVE-2020-26144 - CVSS 6.5 (medium), 2021-05-11: An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the…
CVE-2020-26139 - CVSS 5.3 (medium), 2021-05-11: An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet…
CVE-2020-26146 - CVSS 5.3 (medium), 2021-05-11: An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet…
CVE-2020-24588 - CVSS 3.5 (low), 2021-05-11: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the…
CVE-2020-26145 - CVSS 6.5 (medium), 2021-05-11: An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast…