Siemens Ruggedcom RM1224 Firmware vulnerabilities

7 CVEs affecting Siemens Ruggedcom RM1224 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31766, published 2022-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14491, published 2017-10-04. Critical severity, CVSS 9.8. EPSS: 84.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVE-2018-5391, published 2018-09-06. High severity, CVSS 7.5. EPSS: 32.4% chance of exploitation in the next 30 days. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service…
CVE-2020-28400, published 2021-07-13. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets…
CVE-2019-13946, published 2020-02-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could…
CVE-2021-25676, published 2021-03-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication…
CVE-2022-31766, published 2022-10-11. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE…
CVE-2021-25667, published 2021-03-15. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE…