Siemens Scalance x308-2m Firmware vulnerabilities

15 CVEs affecting Siemens Scalance x308-2m Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26380, published 2022-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1802, published 2012-04-18. High severity, CVSS 7.8. EPSS: 6.1% chance of exploitation in the next 30 days. Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300…
CVE-2020-28400, published 2021-07-13. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets…
CVE-2020-25226, published 2021-01-12. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions <…
CVE-2022-25753, published 2022-04-12. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2020-15800, published 2021-01-12. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions <…
CVE-2022-25752, published 2022-04-12. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-26335, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-26334, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-25751, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-25755, published 2022-04-12. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…

Latest

CVE-2022-26380, published 2022-04-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-25756, published 2022-04-12. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…
CVE-2022-25754, published 2022-04-12. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V),…