Siemens Scalance w1788-2ia m12 Firmware vulnerabilities

7 CVEs affecting Siemens Scalance w1788-2ia m12 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30191, published 2024-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-28328, published 2022-04-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA…
CVE-2022-46143, published 2022-12-13. Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days. Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
CVE-2022-28329, published 2022-04-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA…
CVE-2022-46142, published 2022-12-13. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
CVE-2022-46140, published 2022-12-13. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the…
CVE-2022-27481, published 2022-04-12. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA…
CVE-2024-30191, published 2024-04-09. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12…