Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2839▼ 348 respecto a la semana anterior
Críticas / altas1378▼ 43 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
14 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 0.96% | — | Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c Firmware+86 | 10/8/2022 | 17/6/2026 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS. | |
| Modificada | Alta (7.5) | 1.7% | — | Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance W700 Ieee 802.11ax FirmwareSiemens Scalance W700 Ieee 802.11n Firmware+80 | 10/8/2022 | 17/6/2026 | Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack. | |
| Modificada | Alta (7.2) | 1.8% | — | Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c Firmware+86 | 10/8/2022 | 17/6/2026 | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. | |
| Modificada | Alta (7.5) | 0.95% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (7.5) | 1.4% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (7.5) | 1.4% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Media (6.1) | 0.56% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (7.5) | 1.3% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (8.8) | 0.53% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (8.8) | 1.7% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Crítica (9.8) | 1.5% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (7.5) | 1.4% | — | Siemens Scalance X302-7eec FirmwareSiemens Scalance X304-2fe FirmwareSiemens Scalance X306-1ldfe FirmwareSiemens Scalance X307-2eec Firmware+20 | 12/4/2022 | 17/6/2026 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE… | |
| Modificada | Alta (8.7) | 1.9% | — | Siemens DK Standard Ethernet Controller Evaluation KIT FirmwareSiemens Ek-ertec 200 Evaulation KIT FirmwareSiemens Ek-ertec 200p Evaluation KIT FirmwareSiemens Ruggedcom Rm1224 Firmware+75 | 13/7/2021 | 17/6/2026 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device. | |
| Modificada | Media (5.9) | 1.2% | — | Siemens Scalance Xr324-12m FirmwareSiemens Scalance Xr324-12m TS FirmwareSiemens Scalance Xr324-4m EEC FirmwareSiemens Scalance Xr324-4m POE Firmware+4 | 12/1/2021 | 17/6/2026 | A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle… |