SS
Product
Scalance S615 Firmware
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 11Low 2
Watch
Add Scalance S615 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50557 | 9.8 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: before 5.0 |
| CVE-2022-36323 | 9.1 | Aug 10 | Affected devices do not properly sanitize an input field Affected: All versions, or not specified |
| CVE-2021-25667 | 8.8 | Mar 15 | A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3… Affected: 4.3 before 6.4 |
| CVE-2022-31766 | 8.6 | Oct 11 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 7.1.2 |
| CVE-2022-36324 | 7.5 | Aug 10 | Affected devices do not properly handle the renegotiation of SSL/TLS parameters Affected: All versions, or not specified |
| CVE-2020-28400 | 7.5 | Jul 13 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition Affected: before 6.4 |
| CVE-2021-25676 | 7.5 | Mar 15 | A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3) Affected: 6.3 |
| CVE-2019-13946 | 7.5 | Feb 11 | Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC… Affected: before 4.3 |
| CVE-2018-5391 | 7.5 | Sep 6 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly Affected: before 6.1 |
| CVE-2024-50572 | 7.2 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2022-46140 | 6.5 | Dec 13 | Affected devices use a weak encryption scheme to encrypt the debug zip file Affected: All versions, or not specified |
| CVE-2017-2681 | 6.5 | May 11 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product Affected: before 4.03 |
| CVE-2017-2680 | 6.5 | May 11 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2) Affected: before 4.03 |
| CVE-2024-50561 | 6.1 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 6.2 and later |
| CVE-2022-46142 | 5.7 | Dec 13 | Affected devices store the CLI user passwords encrypted in flash memory Affected: All versions, or not specified |
| CVE-2022-36325 | 4.8 | Aug 10 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface Affected: All versions, or not specified |
| CVE-2024-50560 | 4.3 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2024-50559 | 4.3 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2024-50558 | 4.3 | Nov 12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <… Affected: before 8.2 |
| CVE-2016-7090 | 4.0 | Sep 29 | The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes… Affected: through 4.01 |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: before 7.1 |
| CVE-2022-46143 | 2.7 | Dec 13 | Affected devices do not check the TFTP blocksize correctly Affected: All versions, or not specified |
Showing 24