Product by Siemens

Scalance X302-7eec Firmware

10 known vulnerabilities in Scalance X302-7eec Firmware (Siemens), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Scalance X302-7eec Firmware (Siemens)

High	CVE-2020-28400	Siemens Development/Evaluation Kits for PROFINET IO: Allocation of Resources Without Limits or Throttling also in 338 other products	7.5	13.07.2021
Critical	CVE-2022-25752	Siemens SCALANCE X302-7 EEC (230V): Use of Insufficiently Random Values also in 72 other products	9.8	12.04.2022
High	CVE-2022-25753	Siemens SCALANCE X302-7 EEC (230V): Stack-based Buffer Overflow also in 72 other products	8.8	12.04.2022
High	CVE-2022-26334	Siemens SCALANCE X302-7 EEC (230V): Classic Buffer Overflow also in 72 other products	7.5	12.04.2022
High	CVE-2022-26335	Siemens SCALANCE X302-7 EEC (230V): Classic Buffer Overflow also in 72 other products	7.5	12.04.2022
High	CVE-2022-25751	Siemens SCALANCE X302-7 EEC (230V): Improper Input Validation also in 72 other products	7.5	12.04.2022
High	CVE-2022-25755	Siemens SCALANCE X302-7 EEC (230V): Improper Access Control also in 72 other products	7.5	12.04.2022
High	CVE-2022-26380	Siemens SCALANCE X302-7 EEC (230V): Out-of-bounds Read also in 72 other products	7.5	12.04.2022
High	CVE-2022-25754	Siemens SCALANCE X302-7 EEC (230V): Cross-Site Request Forgery (CSRF) also in 72 other products	8.8	12.04.2022
Medium	CVE-2022-25756	Siemens SCALANCE X302-7 EEC (230V): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) also in 72 other products	6.1	12.04.2022