ByteOS

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.06%

||

7 Day CHG~0.00%

Published-10 May, 2019 | 17:14

Updated-05 Aug, 2024 | 06:17

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1

Product-aruba_instant scalance_w1750d_firmware scalance_w1750d Aruba Instant (IAP)

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2018-4834

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-1.50% / 80.42%

||

7 Day CHG~0.00%

Published-24 Jan, 2018 | 16:00

Updated-17 Sep, 2024 | 01:35

A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.

Vendor-Siemens AG

CWE ID-CWE-306

Missing Authentication for Critical Function

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

CVE-2018-4841

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-3.00% / 86.06%

||

7 Day CHG~0.00%

Published-29 Mar, 2018 | 13:00

Updated-17 Sep, 2024 | 03:02

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

Vendor-Siemens AG

Product-tim_1531_irc_firmware tim_1531_irc TIM 1531 IRC

CWE ID-CWE-303

Incorrect Implementation of Authentication Algorithm

CWE ID-CWE-287

Improper Authentication

CVE-2024-23810

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-0.76% / 72.34%

||

7 Day CHG~0.00%

Published-13 Feb, 2024 | 09:00

Updated-09 May, 2025 | 18:27

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.

Vendor-Siemens AG

Product-sinec_nms SINEC NMS

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2024-23813

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.3||HIGH

EPSS-0.14% / 35.28%

||

7 Day CHG~0.00%

Published-13 Feb, 2024 | 09:00

Updated-09 May, 2025 | 18:28

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

Vendor-Siemens AG

Product-polarion_alm Polarion ALM

CWE ID-CWE-287

Improper Authentication

CVE-2024-22039

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-8.46% / 92.00%

||

7 Day CHG~0.00%

Published-12 Mar, 2024 | 10:21

Updated-01 Aug, 2024 | 22:35

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow. This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.

Vendor-Siemens AG

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37886

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.30% / 78.92%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37885

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.30% / 78.92%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points; 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37891

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-0.82% / 73.48%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37889

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.30% / 78.92%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37887

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.30% / 78.92%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-36361

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.47% / 63.71%

||

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-20 Nov, 2024 | 14:54

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37890

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-0.82% / 73.48%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37011

Matching Score-8

Assigner-Siemens

Product-saml Mendix SAML (Mendix 9 compatible, New Track)Mendix SAML (Mendix 7 compatible)Mendix SAML (Mendix 9 compatible, Upgrade Track)Mendix SAML (Mendix 8 compatible)

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.03% / 7.29%

||

7 Day CHG~0.00%

Published-13 Sep, 2022 | 00:00

Updated-03 Aug, 2024 | 10:21

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0). Affected versions of the module insufficiently protect from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. For compatibility reasons, fix versions still contain this issue, but only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled.

Vendor-mendix Siemens AG

CWE ID-CWE-294

Authentication Bypass by Capture-replay

CVE-2024-54092

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.27% / 49.94%

||

7 Day CHG~0.00%

Published-08 Apr, 2025 | 08:22

Updated-08 Jul, 2025 | 11:15

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit - arm64 V1.19 (All versions), Industrial Edge Device Kit - arm64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - arm64 V1.21 (All versions < V1.21.1-1), Industrial Edge Device Kit - x86-64 V1.17 (All versions), Industrial Edge Device Kit - x86-64 V1.18 (All versions), Industrial Edge Device Kit - x86-64 V1.19 (All versions), Industrial Edge Device Kit - x86-64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - x86-64 V1.21 (All versions < V1.21.1-1), Industrial Edge Own Device (IEOD) (All versions < V1.21.1-1-a), Industrial Edge Virtual Device (All versions < V1.21.1-1-a), SCALANCE LPE9413 (6GK5998-3GS01-2AC2) (All versions < V2.1), SIMATIC IPC BX-39A Industrial Edge Device (All versions < V3.0), SIMATIC IPC BX-59A Industrial Edge Device (All versions < V3.0), SIMATIC IPC127E Industrial Edge Device (All versions < V3.0), SIMATIC IPC227E Industrial Edge Device (All versions < V3.0), SIMATIC IPC427E Industrial Edge Device (All versions < V3.0), SIMATIC IPC847E Industrial Edge Device (All versions < V3.0). Affected devices do not properly enforce user authentication on specific API endpoints when identity federation is used. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that identity federation is currently or has previously been used and the attacker has learned the identity of a legitimate user.

CWE ID-CWE-1390

Weak Authentication

CVE-2022-34821

Matching Score-8

Assigner-Siemens

Product-siplus_net_cp_1242-7_v2 simatic_cp_1543-1_firmware simatic_cp_1243-7_lte_us siplus_et_200sp_cp_1542sp-1_irc_tx_rail simatic_cp_1243-8_irc_firmware simatic_cp_1542sp-1_irc simatic_cp_1543sp-1_firmware siplus_net_cp_1242-7_v2_firmware simatic_cp_1242-7_v2_firmware simatic_cp_1543-1 simatic_cp_1543sp-1 simatic_cp_1243-7_lte_eu siplus_s7-1200_cp_1243-1_firmware simatic_cp_1243-1_firmware siplus_s7-1200_cp_1243-1_rail_firmware siplus_et_200sp_cp_1543sp-1_isec simatic_cp_1242-7_v2 siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware simatic_cp_1243-1 siplus_et_200sp_cp_1543sp-1_isec_tx_rail siplus_et_200sp_cp_1543sp-1_isec_firmware siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware simatic_cp_1542sp-1_irc_firmware siplus_s7-1200_cp_1243-1_rail simatic_cp_1243-7_lte_eu_firmware simatic_cp_1243-8_irc siplus_net_cp_1543-1_firmware siplus_net_cp_1543-1 simatic_cp_1243-7_lte_us_firmware siplus_s7-1200_cp_1243-1 SCALANCE M876-3 (ROK)SCALANCE M876-4 (NAM)SCALANCE MUM856-1 (EU)SIPLUS NET CP 1242-7 V2 SCALANCE M876-4 SCALANCE SC646-2C SCALANCE WAM766-1 (US)SCALANCE M826-2 SHDSL-Router SCALANCE SC632-2C SIMATIC CP 1543-1 SIMATIC CP 1242-7 V2 RUGGEDCOM RM1224 LTE(4G) NAM SCALANCE WAM763-1 (ME)SCALANCE SC636-2C SCALANCE WUM766-1 SCALANCE WAM766-1 (ME)SCALANCE M876-3 SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL SCALANCE WAM763-1 (US)SIPLUS S7-1200 CP 1243-1 RAIL SCALANCE S615 LAN-Router SCALANCE MUM856-1 (RoW)SCALANCE WAM766-1 EEC (ME)SIMATIC CP 1543SP-1 SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SCALANCE M874-3 SCALANCE WUB762-1 iFeatures SCALANCE WUM766-1 (ME)SCALANCE WAM763-1 SCALANCE M874-2 SIMATIC CP 1243-7 LTE US SCALANCE WUB762-1 SIMATIC CP 1243-1 RUGGEDCOM RM1224 LTE(4G) EU SIMATIC CP 1243-7 LTE EU SIMATIC CP 1243-8 IRC SCALANCE SC642-2C SCALANCE S615 EEC LAN-Router SCALANCE MUM853-1 (EU)SCALANCE WAM766-1 SCALANCE WAB762-1 SCALANCE WUM763-1 SCALANCE M812-1 ADSL-Router SIPLUS ET 200SP CP 1543SP-1 ISEC SIMATIC CP 1542SP-1 IRC SCALANCE M876-4 (EU)SCALANCE WUM763-1 (US)SCALANCE WAM766-1 EEC (US)SCALANCE WAM766-1 EEC SCALANCE M816-1 ADSL-Router SCALANCE M804PB SIPLUS NET CP 1543-1 SIPLUS S7-1200 CP 1243-1 SCALANCE SC622-2C SCALANCE SC626-2C SCALANCE WUM766-1 (USA)

Matching Score-8

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-0.50% / 64.92%

||

7 Day CHG-0.17%

Published-12 Jul, 2022 | 00:00

Updated-21 Apr, 2025 | 13:52

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), SCALANCE M874-2 (6GK5874-2AA00-2AA2), SCALANCE M874-3 (6GK5874-3AA00-2AA2), SCALANCE M876-3 (6GK5876-3AA02-2BA2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2), SCALANCE M876-4 (6GK5876-4AA10-2BA2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0), SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.

Vendor-Siemens AG

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-34660

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.76% / 85.45%

||

7 Day CHG~0.00%

Published-10 Aug, 2022 | 11:18

Updated-03 Aug, 2024 | 09:15

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

Vendor-Siemens AG

Product-teamcenter Teamcenter V12.4 Teamcenter V13.0 Teamcenter V14.0 Teamcenter V13.3 Teamcenter V13.1 Teamcenter V13.2

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2024-50557

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.6||HIGH

EPSS-0.73% / 71.75%

||

7 Day CHG~0.00%

Published-12 Nov, 2024 | 12:49

Updated-20 Nov, 2024 | 16:47

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2024-49775

Matching Score-8

Assigner-Siemens

Product-Opcenter RDL Totally Integrated Automation Portal (TIA Portal) V16 Totally Integrated Automation Portal (TIA Portal) V17 Opcenter Execution Foundation Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V19 SIMATIC PCS neo V5.0 SINEC NMS SIMATIC PCS neo V4.0 Opcenter Quality SIMATIC PCS neo V4.1 Opcenter Intelligence

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.48% / 64.31%

||

7 Day CHG~0.00%

Published-16 Dec, 2024 | 15:06

Updated-12 Mar, 2025 | 16:34

A vulnerability has been identified in Opcenter Execution Foundation (All versions), Opcenter Intelligence (All versions), Opcenter Quality (All versions), Opcenter RDL (All versions), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Vendor-Siemens AG

CWE ID-CWE-122

Heap-based Buffer Overflow

CVE-2022-29873

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.69% / 85.28%

||

7 Day CHG~0.00%

Published-10 May, 2022 | 09:47

Updated-03 Aug, 2024 | 06:33

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Vendor-Siemens AG

CWE ID-CWE-141

Improper Neutralization of Parameter/Argument Delimiters

CVE-2021-31886

Matching Score-8

Assigner-Siemens

Product-talon_tc_compact desigo_pxm20-e desigo_pxc22.1-e.d apogee_pxc_compact desigo_pxc001-e.d_firmware apogee_modular_equiment_controller_firmware desigo_pxc12-e.d apogee_pxc_compact_firmware desigo_pxc200-e.d_firmware apogee_modular_equiment_controller desigo_pxc100-e.d apogee_modular_building_controller desigo_pxc001-e.d apogee_pxc_modular_firmware talon_tc_modular_firmware talon_tc_modular desigo_pxc22.1-e.d_firmware desigo_pxc50-e.d apogee_modular_building_controller_firmware desigo_pxc12-e.d_firmware desigo_pxc22-e.d desigo_pxc22-e.d_firmware desigo_pxc00-u_firmware nucleus_readystart_v3 desigo_pxc00-e.d desigo_pxc100-e.d_firmware desigo_pxc200-e.d desigo_pxc00-e.d_firmware desigo_pxc50-e.d_firmware nucleus_net desigo_pxc64-u talon_tc_compact_firmware desigo_pxc36.1-e.d_firmware desigo_pxc64-u_firmware desigo_pxc128-u desigo_pxc00-u apogee_pxc_modular desigo_pxm20-e_firmware desigo_pxc36.1-e.d desigo_pxc128-u_firmware nucleus_source_code TALON TC Compact (BACnet)Desigo PXC64-U Desigo PXC00-U Nucleus Source Code APOGEE PXC Compact (BACnet)APOGEE MEC (PPC) (P2 Ethernet)Nucleus NET Desigo PXC001-E.D Desigo PXC100-E.D Desigo PXC12-E.D APOGEE MBC (PPC) (BACnet)Desigo PXC22.1-E.D TALON TC Modular (BACnet)Nucleus ReadyStart V3 APOGEE MEC (PPC) (BACnet)Desigo PXC00-E.D APOGEE MBC (PPC) (P2 Ethernet)Desigo PXC50-E.D APOGEE PXC Compact (P2 Ethernet)Desigo PXC36.1-E.D APOGEE PXC Modular (P2 Ethernet)Desigo PXC22-E.D Desigo PXC200-E.D Desigo PXM20-E APOGEE PXC Modular (BACnet)Desigo PXC128-U

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.90% / 85.83%

||

7 Day CHG~0.00%

Published-09 Nov, 2021 | 11:31

Updated-03 Aug, 2024 | 23:10

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “USER” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0010)

Vendor-Siemens AG

CWE ID-CWE-170

Improper Null Termination

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-47902

Matching Score-8

Assigner-Siemens

Product-intermesh_7707_fire_subscriber intermesh_7177_hybrid_2.0_subscriber intermesh_7707_fire_subscriber_firmware InterMesh 7707 Fire Subscriber InterMesh 7177 Hybrid 2.0 Subscriber intermesh_7177_hybrid2.0_subscriber intermesh_7707_fire_subscriber

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.14% / 34.90%

||

7 Day CHG~0.00%

Published-23 Oct, 2024 | 14:21

Updated-30 Oct, 2024 | 15:48

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not authenticate GET requests that execute specific commands (such as `ping`) on operating system level.

Vendor-Siemens AG

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2021-31337

Matching Score-8

Assigner-Siemens

Product-sinamics_sl150 sinamics_sm150i sinamics_sm150_firmware sinamics_sl150_firmware sinamics_sm150i_firmware sinamics_sm150 SINAMICS Medium Voltage Products

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.62% / 69.15%

||

7 Day CHG~0.00%

Published-28 Jun, 2021 | 12:24

Updated-03 Aug, 2024 | 22:55

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

Vendor-n/a Siemens AG

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2021-25668

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.53% / 66.47%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-03 Aug, 2024 | 20:11

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions < 5.5.1), SCALANCE X204 IRT PRO (All versions < 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code.

Vendor-Siemens AG

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-41798

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.20% / 42.02%

||

7 Day CHG~0.00%

Published-08 Oct, 2024 | 08:40

Updated-10 Oct, 2024 | 12:56

A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by sniffing the Modbus clear text communication.

Vendor-Siemens AG

Product-SENTRON 7KM PAC3200 sentron_pac3200

CWE ID-CWE-287

Improper Authentication

CVE-2021-25149

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-0.71% / 71.45%

||

7 Day CHG~0.00%

Published-29 Mar, 2021 | 23:58

Updated-03 Aug, 2024 | 19:56

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Product-scalance_w1750d_firmware instant scalance_w1750d Aruba Instant Access Points

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8275

Matching Score-8

Assigner-Kaspersky

Product-sinumerik_pcu_base_win10_software\/ipc ultravnc sinumerik_pcu_base_win7_software\/ipc sinumerik_access_mymachine\/p2p UltraVNC

Matching Score-8

Assigner-Kaspersky

CVSS Score-9.8||CRITICAL

EPSS-4.58% / 88.79%

||

7 Day CHG~0.00%

Published-09 Mar, 2019 | 00:00

Updated-17 Sep, 2024 | 03:12

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Vendor-uvnc Siemens AG Kaspersky Lab

CWE ID-CWE-170

Improper Null Termination

CVE-2016-9157

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-1.46% / 80.03%

||

7 Day CHG~0.00%

Published-05 Dec, 2016 | 08:09

Updated-12 Apr, 2025 | 10:46

A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP.

Vendor-n/a Siemens AG

Product-sicam_pas\/pqs Siemens SICAM PAS through V8.08

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-284

Improper Access Control

CVE-2022-26476

Matching Score-6

Assigner-Siemens

Product-spectrum_power_4 spectrum_power_microgrid_management_system spectrum_power_7 Spectrum Power 4 Spectrum Power 7 Spectrum Power MGMS

Matching Score-6

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-0.25% / 48.31%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:21

Updated-03 Aug, 2024 | 05:03

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.

Vendor-Siemens AG

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2020-28395

Matching Score-6

Assigner-Siemens

Product-scalance_xr326-2c_poe_wg_firmware scalance_xr324-12m scalance_xr324-12m_ts scalance_xr324-4m_eec scalance_xr324-4m_poe scalance_xr328-4c_wg scalance_xr324-4m_poe_firmware scalance_xr324wg scalance_xr324-4m_eec_firmware scalance_xr324-12m_ts_firmware scalance_xr326-2c_poe_wg scalance_xr324wg_firmware scalance_xr328-4c_wg_firmware scalance_xr324-4m_poe_ts scalance_xr324-4m_poe_ts_firmware scalance_xr324-12m_firmware SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants)SCALANCE X-200RNA switch family

Matching Score-6

Assigner-Siemens

CVSS Score-5.9||MEDIUM

EPSS-0.17% / 38.71%

||

7 Day CHG~0.00%

Published-12 Jan, 2021 | 00:00

Updated-04 Aug, 2024 | 16:33

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Vendor-Siemens AG

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2020-28391

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-5.9||MEDIUM

EPSS-0.15% / 36.31%

||

7 Day CHG~0.00%

Published-12 Jan, 2021 | 00:00

Updated-04 Aug, 2024 | 16:33

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.

Vendor-Siemens AG

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-45033

Matching Score-6

Assigner-Siemens

Product-cp-8000_master_module_with_i\/o_-25\/\+70 cp-8000_master_module_with_i\/o_-25\/\+70_firmware cp-8000_master_module_with_i\/o_-40\/\+70_firmware cp-8022_master_module_with_gprs_firmware cp-8021_master_module cp-8022_master_module_with_gprs cp-8000_master_module_with_i\/o_-40\/\+70 cp-8021_master_module_firmware CP-8022 MASTER MODULE WITH GPRS CP-8021 MASTER MODULE CP-8000 MASTER MODULE WITH I/O -25/+70°C CP-8000 MASTER MODULE WITH I/O -40/+70°C

Matching Score-6

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-0.28% / 51.25%

||

7 Day CHG~0.00%

Published-11 Jan, 2022 | 11:27

Updated-04 Aug, 2024 | 04:32

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). An undocumented debug port uses hard-coded default credentials. If this port is enabled by a privileged user, an attacker aware of the credentials could access an administrative debug shell on the affected device.

Vendor-Siemens AG

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-45106

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 44.46%

||

7 Day CHG~0.00%

Published-09 Feb, 2022 | 15:17

Updated-04 Aug, 2024 | 04:39

A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database.

Vendor-Siemens AG

Product-sicam_toolbox_ii SICAM TOOLBOX II

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2020-25229

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.58%

||

7 Day CHG~0.00%

Published-14 Dec, 2020 | 21:05

Updated-04 Aug, 2024 | 15:33

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.

Vendor-Siemens AG

Product-logo\!_8_bm logo\!_8_bm_firmware LOGO! 8 BM (incl. SIPLUS variants)

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2020-25231

Matching Score-6

Assigner-Siemens

Product-logo\!_soft_comfort logo\!_8_bm logo\!_8_bm_firmware LOGO! 8 BM (incl. SIPLUS variants)LOGO! Soft Comfort

Matching Score-6

Assigner-Siemens

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.93%

||

7 Day CHG~0.00%

Published-14 Dec, 2020 | 21:05

Updated-04 Aug, 2024 | 15:33

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.

Vendor-Siemens AG

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2023-33920

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-6.8||MEDIUM

EPSS-0.11% / 30.00%

||

7 Day CHG~0.00%

Published-13 Jun, 2023 | 08:17

Updated-13 Feb, 2025 | 16:55

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash of the root password in a hard-coded form, which could be exploited for UART console login to the device. An attacker with direct physical access could exploit this vulnerability.

Vendor-Siemens AG

Product-cpci85_firmware cp-8031_master_module cp-8050_master_module CP-8031 MASTER MODULE CP-8050 MASTER MODULE

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2019-6572

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.90% / 74.79%

||

7 Day CHG~0.00%

Published-14 May, 2019 | 19:54

Updated-04 Aug, 2024 | 20:23

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The affected device offered SNMP read and write capacities with a publicly know hardcoded community string. The security vulnerability could be exploited by an attacker with network access to the affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-27392

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-0.24% / 47.66%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-03 Aug, 2024 | 20:48

A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2). Affected Open Network Bridges store user credentials for the authentication between ONVIF clients and ONVIF server using a hard-coded key. The encrypted credentials can be retrieved via the MIP SDK. This could allow an authenticated remote attacker to retrieve and decrypt all credentials stored on the ONVIF server.

Vendor-Siemens AG

Product-siveillance_video_open_network_bridge Siveillance Video Open Network Bridge

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2022-31619

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-8.8||HIGH

EPSS-1.39% / 79.56%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:21

Updated-03 Aug, 2024 | 07:26

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.

Vendor-Siemens AG

Product-teamcenter Teamcenter V12.4 Teamcenter V13.0 Teamcenter V14.0 Teamcenter V13.3 Teamcenter V13.1 Teamcenter V13.2

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2010-2772

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.89%

||

7 Day CHG~0.00%

Published-22 Jul, 2010 | 10:00

Updated-11 Apr, 2025 | 00:51

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.

Vendor-n/a Siemens AG

Product-simatic_wincc simatic_pcs_7 n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2019-10920

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.96% / 75.51%

||

7 Day CHG~0.00%

Published-14 May, 2019 | 19:54

Updated-04 Aug, 2024 | 22:40

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-logo\!8_bm_firmware logo\!8_bm LOGO! 8 BM (incl. SIPLUS variants)

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2024-41794

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-0.10% / 28.90%

||

7 Day CHG~0.00%

Published-08 Apr, 2025 | 08:22

Updated-08 Apr, 2025 | 18:13

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).

Vendor-Siemens AG

Product-SENTRON 7KT PAC1260 Data Manager

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2018-4846

Matching Score-6

Assigner-Siemens

Product-rapidlab_1200_firmware rapidpoint_500_firmware rapidpoint_500 rapidpoint_400_firmware rapidlab_1200 rapidpoint_400 RAPIDLab 1200 systems RAPIDPoint 400 systems RAPIDPoint 500 systems RAPIDLab 1200 Series RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 400 systems

Matching Score-6

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.77%

||

7 Day CHG~0.00%

Published-26 Jun, 2018 | 18:00

Updated-17 Sep, 2024 | 01:01

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.

Vendor-Siemens AG

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2022-37832

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.08% / 24.82%

||

7 Day CHG~0.00%

Published-16 Dec, 2022 | 00:00

Updated-18 Apr, 2025 | 14:15

Mutiny 7.2.0-10788 suffers from Hardcoded root password.

Vendor-mutiny n/a

Product-mutiny n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2018-21137

Matching Score-4

Assigner-MITRE Corporation

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.27% / 50.38%

||

7 Day CHG~0.00%

Published-23 Apr, 2020 | 20:05

Updated-05 Aug, 2024 | 12:26

Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76.

Vendor-n/a NETGEAR, Inc.

Product-d3600 d3600_firmware d6000_firmware d6000 n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-22667

Matching Score-4

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

CVSS Score-9.8||CRITICAL

EPSS-0.60% / 68.39%

||

7 Day CHG~0.00%

Published-24 Feb, 2021 | 16:01

Updated-03 Aug, 2024 | 18:51

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior).

Vendor-n/a Advantech (Advantech Co., Ltd.)

Product-bb-eswgp506-2sfp-t_firmware bb-eswgp506-2sfp-t BB-ESWGP506-2SFP-T

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-22644

Matching Score-4

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.43%

||

7 Day CHG~0.00%

Published-28 Jul, 2022 | 14:19

Updated-17 Apr, 2025 | 16:15

Ovarro TBox Use of Hard-coded Cryptographic Key

Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.

Vendor-ovarro Ovarro

Product-tbox_ms-cpu32_firmware tbox_ms-cpu32-s2_firmware tbox_tg2 tbox_lt2-530_firmware tbox_lt2-532_firmware tbox_lt2-540_firmware tbox_rm2 tbox_ms-cpu32-s2 tbox_lt2-540 tbox_lt2-532 tbox_lt2-530 tbox_ms-cpu32 twinsoft tbox_tg2_firmware tbox_rm2_firmware TBox

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2019-19492

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-35.48% / 96.93%

||

7 Day CHG~0.00%

Published-02 Dec, 2019 | 01:13

Updated-05 Aug, 2024 | 02:16

FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.

Vendor-freeswitch n/a

Product-freeswitch n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2022-36952

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.4||HIGH

EPSS-0.18% / 39.53%

||

7 Day CHG~0.00%

Published-27 Jul, 2022 | 20:59

Updated-03 Aug, 2024 | 10:21

In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Vendor-n/a Veritas Technologies LLC

Product-netbackup n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2021-22730

Matching Score-4

Assigner-Schneider Electric