Scalance Xc-300xr-300xc-400xr-500wgxr-500 Family (Siemens) - vulnerabilities (CVEs)

213 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-09-30. Vendor: Siemens.

CVEs of Scalance Xc-300xr-300xc-400xr-500wgxr-500 Family

CVE-2025-9231 - CVSS 6.5 (medium), 2025-09-30: Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM…
CVE-2025-9230 - CVSS 7.5 (high), 2025-09-30: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact…
CVE-2025-9232 - CVSS 5.9 (medium), 2025-09-30: Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and…
CVE-2025-39865 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer…
CVE-2025-39864 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in…
CVE-2025-39860 - CVSS 8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat…
CVE-2025-39853 - CVSS 7.1 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns…
CVE-2025-39846 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In…
CVE-2025-39841 - CVSS 9.8 (critical), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free…
CVE-2025-39839 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet()…
CVE-2025-59375 - CVSS 7.5 (high), 2025-09-15: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVE-2025-9086 - CVSS 7.5 (high), 2025-09-12: 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname,…
CVE-2025-38498 - CVSS 7.8 (high), 2025-07-30: In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation…
CVE-2025-38350 - CVSS 7.8 (high), 2025-07-19: In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful…
CVE-2025-6141 - CVSS 4.8 (medium), 2025-06-16: A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of…
CVE-2025-4373 - CVSS 4.8 (medium), 2025-05-06: A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the…
CVE-2025-3360 - CVSS 3.7 (low), 2025-04-07: A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the…
CVE-2024-8176 - CVSS 7.5 (high), 2025-03-14: A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML…
CVE-2025-1390 - CVSS 6.1 (medium), 2025-02-18: The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are…
CVE-2025-21694 - CVSS 5.5 (medium), 2025-02-12: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix…
CVE-2024-57951 - CVSS 7.8 (high), 2025-02-12: In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU…
CVE-2025-21692 - CVSS 7.8 (high), 2025-02-10: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that…
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2025-0725 - CVSS 7.3 (high), 2025-02-05: When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib…
CVE-2025-0665 - CVSS 7 (high), 2025-02-05: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVE-2024-52332 - CVSS 7.1 (high), 2025-01-11: In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver()…
CVE-2024-48881 - CVSS 5.5 (medium), 2025-01-11: In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache:…
CVE-2024-56780 - CVSS 5.5 (medium), 2025-01-08: In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is…
CVE-2024-56770 - CVSS 5.5 (medium), 2025-01-08: In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any…
CVE-2024-56644 - CVSS 7.5 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in…
CVE-2024-56650 - CVSS 7.1 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following…
CVE-2024-56606 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After…
CVE-2024-56600 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attaches…
CVE-2024-56601 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches…
CVE-2024-56570 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the…
CVE-2024-56569 - CVSS 5.5 (medium), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the…
CVE-2024-53165 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-53101 - CVSS 5.5 (medium), 2024-11-25: In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses…
CVE-2024-53057 - CVSS 7.8 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog,…
CVE-2024-50301 - CVSS 7.8 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of…
CVE-2024-50299 - CVSS 8.2 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that…
CVE-2024-52533 - CVSS 9.8 (critical), 2024-11-11: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a…
CVE-2024-50262 - CVSS 7.8 (high), 2024-11-09: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node…
CVE-2024-50251 - CVSS 6.2 (medium), 2024-11-09: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access…
CVE-2024-50188 - CVSS 7.8 (high), 2024-11-08: In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber…
CVE-2024-50095 - CVSS 7.5 (high), 2024-11-05: In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-50045 - CVSS 7.5 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_dst skb Fix a kernel panic in the…
CVE-2024-50040 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 ("igb: Fix…
CVE-2024-50046 - CVSS 9.8 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() On the node of an NFS…
CVE-2024-50033 - CVSS 9.8 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that…
CVE-2024-50039 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCA_STAB only for root qdisc Most qdiscs maintain their backlog using…
CVE-2024-50035 - CVSS 7.1 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode()…
CVE-2024-50015 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The…
CVE-2024-50006 - CVSS 4.7 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible…
CVE-2024-50001 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case…
CVE-2024-49997 - CVSS 7.5 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not…
CVE-2024-49977 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net:…
CVE-2024-49982 - CVSS 8.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270,…
CVE-2024-49949 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83…
CVE-2024-49948 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdisc_pkt_len_init() One path takes care of SKB_GSO_DODGY,…
CVE-2024-49955 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook…
CVE-2024-49952 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption syzbot found that nf_dup_ipv4()…
CVE-2024-49944 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start In…
CVE-2024-49889 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be…
CVE-2024-49884 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following…
CVE-2024-49881 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big…
CVE-2024-49851 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space…
CVE-2024-47747 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the…
CVE-2024-47735 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Fix missuse of…
CVE-2024-47709 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). syzbot reported a warning in…
CVE-2024-47706 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks:…
CVE-2024-47705 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The…
CVE-2024-47710 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: sock_map: Add a cond_resched() in sock_hash_free() Several syzbot soft lockup reports all…
CVE-2024-47701 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up…
CVE-2024-47696 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit…
CVE-2024-47684 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock…
CVE-2024-47685 - CVSS 9.1 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that…
CVE-2024-47660 - CVSS 4.7 (medium), 2024-10-09: In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many…
CVE-2024-46783 - CVSS 5.5 (medium), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the…
CVE-2024-46759 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST()…
CVE-2024-46743 - CVSS 7.3 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When…
CVE-2024-46750 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the…
CVE-2024-46745 - CVSS 5.5 (medium), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput…
CVE-2024-46744 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in…
CVE-2024-46679 - CVSS 4.7 (medium), 2024-09-13: In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-44990 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an…
CVE-2024-44989 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL…
CVE-2024-44987 - CVSS 7.8 (high), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After…
CVE-2024-44960 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-44944 - CVSS 5.5 (medium), 2024-08-30: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path…
CVE-2024-45492 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where…
CVE-2024-45491 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX…
CVE-2024-45490 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
CVE-2024-44935 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while…
CVE-2024-43893 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL…
CVE-2024-43890 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at…