Siemens Scalance x204rna Eec Firmware vulnerabilities

4 CVEs affecting Siemens Scalance x204rna Eec Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6111, published 2019-01-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6111, published 2019-01-31. Medium severity, CVSS 5.9. EPSS: 58.2% chance of exploitation in the next 30 days. An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only…
CVE-2019-6110, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 24.9% chance of exploitation in the next 30 days. In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI…
CVE-2019-6109, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the…
CVE-2018-20685, published 2019-01-10. Medium severity, CVSS 5.3. EPSS: 3.7% chance of exploitation in the next 30 days. In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the…