Scalance Xb216 (Pn)

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Published: 2024-07-09T12:02:53.001Z
Updated: 2026-06-09T09:01:52.617Z

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Published: 2023-11-14T11:04:02.880Z
Updated: 2026-02-25T16:51:10.886Z

Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.

Published: 2023-11-14T11:03:52.696Z
Updated: 2026-02-25T16:51:11.212Z

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-01-14T10:27:11.064Z

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:43:06.184Z