Product by Siemens
Scalance X308-2ld Firmware
14 known vulnerabilities in Scalance X308-2ld Firmware (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-25226 | Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants): Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2020-15800 | Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants): Heap-based Buffer Overflow | 9.8 | |
| High | CVE-2020-28400 | Siemens Development/Evaluation Kits for PROFINET IO: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Critical | CVE-2022-25752 | Siemens SCALANCE X302-7 EEC (230V): Use of Insufficiently Random Values | 9.8 | |
| High | CVE-2022-25753 | Siemens SCALANCE X302-7 EEC (230V): Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2022-26335 | Siemens SCALANCE X302-7 EEC (230V): Classic Buffer Overflow | 7.5 | |
| High | CVE-2022-26334 | Siemens SCALANCE X302-7 EEC (230V): Classic Buffer Overflow | 7.5 | |
| High | CVE-2022-25751 | Siemens SCALANCE X302-7 EEC (230V): Improper Input Validation | 7.5 | |
| High | CVE-2022-25755 | Siemens SCALANCE X302-7 EEC (230V): Improper Access Control | 7.5 | |
| High | CVE-2022-26380 | Siemens SCALANCE X302-7 EEC (230V): Out-of-bounds Read | 7.5 | |
| Medium | CVE-2020-15799 | Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants): Missing Authentication for Critical Function | 6.5 | |
| Medium | CVE-2020-28391 | Siemens SCALANCE X-200 switch family (incl. SIPLUS NET variants): Use of Hard-coded Cryptographic Key | 5.9 | |
| High | CVE-2022-25754 | Siemens SCALANCE X302-7 EEC (230V): Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2022-25756 | Siemens SCALANCE X302-7 EEC (230V): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 6.1 |