Siemens Scalance x208 Pro Firmware vulnerabilities

4 CVEs affecting Siemens Scalance x208 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26649, published 2022-07-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29998, published 2021-04-13. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
CVE-2022-26649, published 2022-07-12. Critical severity, CVSS 9.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT…
CVE-2022-26647, published 2022-07-12. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT…
CVE-2022-26648, published 2022-07-12. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT…