Siemens Scalance x204rna Firmware vulnerabilities

9 CVEs affecting Siemens Scalance x204rna Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-13933, published 2020-01-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15473, published 2018-08-17. Medium severity, CVSS 5.3. EPSS: 98.6% chance of exploitation in the next 30 days. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed,…
CVE-2003-0190, published 2003-05-12. Medium severity, CVSS 5.0. EPSS: 76.8% chance of exploitation in the next 30 days. OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a…
CVE-2019-6111, published 2019-01-31. Medium severity, CVSS 5.9. EPSS: 58.2% chance of exploitation in the next 30 days. An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only…
CVE-2019-6110, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 24.9% chance of exploitation in the next 30 days. In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI…
CVE-2019-6109, published 2019-01-31. Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the…
CVE-2018-20685, published 2019-01-10. Medium severity, CVSS 5.3. EPSS: 3.7% chance of exploitation in the next 30 days. In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the…
CVE-2019-16905, published 2019-10-09. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This…
CVE-2019-13933, published 2020-01-16. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC…
CVE-2018-4833, published 2018-06-14. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3),…