Siemens Scalance w700 Ieee 802.11n Firmware vulnerabilities

8 CVEs affecting Siemens Scalance w700 Ieee 802.11n Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36325, published 2022-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-26147, published 2021-05-11. Medium severity, CVSS 5.4. EPSS: 7.6% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused…
CVE-2020-26146, published 2021-05-11. Medium severity, CVSS 5.3. EPSS: 5.6% chance of exploitation in the next 30 days. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to…
CVE-2020-26144, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 4.9% chance of exploitation in the next 30 days. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid…
CVE-2020-26143, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 4.2% chance of exploitation in the next 30 days. An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An…
CVE-2022-36323, published 2022-08-10. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
CVE-2022-36324, published 2022-08-10. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of…
CVE-2019-13946, published 2020-02-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could…
CVE-2022-36325, published 2022-08-10. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code…