Siemens Scalance Sc-600 Firmware vulnerabilities

6 CVEs affecting Siemens Scalance Sc-600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36325, published 2022-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
CVE-2018-5391, published 2018-09-06. High severity, CVSS 7.5. EPSS: 32.4% chance of exploitation in the next 30 days. The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service…
CVE-2022-36323, published 2022-08-10. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
CVE-2021-25676, published 2021-03-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication…
CVE-2022-36325, published 2022-08-10. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code…
CVE-2019-10928, published 2019-08-13. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow…