Siemens Scalance Xm-400 Firmware vulnerabilities

4 CVEs affecting Siemens Scalance Xm-400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-28393, published 2021-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-3449, published 2021-03-25. Medium severity, CVSS 5.9. EPSS: 63.5% chance of exploitation in the next 30 days. An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where…
CVE-2020-28393, published 2021-05-12. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected…
CVE-2019-13946, published 2020-02-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could…
CVE-2017-12736, published 2017-12-26. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of…