Scalance Xrm334 24v Dc (Siemens) - vulnerabilities (CVEs)

32 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-09-30. Vendor: Siemens.

CVEs of Scalance Xrm334 24v Dc

CVE-2025-9232 - CVSS 5.9 (medium), 2025-09-30: Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and…
CVE-2025-9231 - CVSS 6.5 (medium), 2025-09-30: Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM…
CVE-2025-9230 - CVSS 7.5 (high), 2025-09-30: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact…
CVE-2025-39865 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer…
CVE-2025-39864 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in…
CVE-2025-39853 - CVSS 7.1 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns…
CVE-2025-39860 - CVSS 8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat…
CVE-2025-39846 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In…
CVE-2025-39839 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet()…
CVE-2025-39841 - CVSS 9.8 (critical), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free…
CVE-2025-59375 - CVSS 7.5 (high), 2025-09-15: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVE-2025-9086 - CVSS 7.5 (high), 2025-09-12: 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname,…
CVE-2025-38498 - CVSS 7.8 (high), 2025-07-30: In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation…
CVE-2025-38350 - CVSS 7.8 (high), 2025-07-19: In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful…
CVE-2025-6141 - CVSS 4.8 (medium), 2025-06-16: A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of…
CVE-2025-40568 - CVSS 5.3 (medium), 2025-06-10: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2),…
CVE-2025-40567 - CVSS 7.1 (high), 2025-06-10: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2),…
CVE-2025-40569 - CVSS 5.9 (medium), 2025-06-10: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2),…
CVE-2024-41797 - CVSS 5.3 (medium), 2025-06-10: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1),…
CVE-2025-4373 - CVSS 4.8 (medium), 2025-05-06: A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the…
CVE-2025-3360 - CVSS 3.7 (low), 2025-04-07: A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the…
CVE-2025-1390 - CVSS 6.1 (medium), 2025-02-18: The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are…
CVE-2025-0725 - CVSS 7.3 (high), 2025-02-05: When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib…
CVE-2025-0665 - CVSS 7 (high), 2025-02-05: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-52533 - CVSS 9.8 (critical), 2024-11-11: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-41996 - CVSS 7.5 (high), 2024-08-26: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the…
CVE-2024-7264 - CVSS 6.5 (medium), 2024-07-31: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the…
CVE-2024-3596 - CVSS 9 (critical), 2024-07-09: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or…
CVE-2022-48174 - CVSS 9.8 (critical), 2023-08-22: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed…