GCVE - cpe:2.3:a:siemens:scalance_xc206-2_(sc):*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:scalance_xc206-2_(sc):*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance Xc206 2 (Sc) (`117fa485-3405-589d-b934-5bbe4400679e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3596`	vulnerable	2026-06-08 06:43:50.737737	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Published: 2024-07-09T12:02:53.001Z Updated: 2026-06-09T09:01:52.617Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2865 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://www.blastradius.fail/ http://www.openwall.com/lists/oss-security/2024/07/09/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44321`	vulnerable	2026-06-08 06:12:40.532039	Details available LOW (2.7) Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again. Published: 2023-11-14T11:04:02.880Z Updated: 2026-02-25T16:51:10.886Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-602936.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44318`	vulnerable	2026-06-08 06:12:40.260306	Details available MEDIUM (4.9) Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file. Published: 2023-11-14T11:03:52.696Z Updated: 2026-02-25T16:51:11.212Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-353002.html https://cert-portal.siemens.com/productcert/html/ssa-690517.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46143`	vulnerable	2026-06-08 05:50:38.161979	Details available LOW (2.7) Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data. Published: 2022-12-13T00:00:00.000Z Updated: 2025-01-14T10:27:11.064Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46142`	vulnerable	2026-06-08 05:50:38.036894	Details available MEDIUM (5.7) Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-21T13:43:06.184Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46140`	vulnerable	2026-06-08 05:50:37.803043	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36325`	vulnerable	2026-06-08 05:46:06.812642	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36324`	vulnerable	2026-06-08 05:46:06.789028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36323`	vulnerable	2026-06-08 05:46:06.593091	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31765`	vulnerable	2026-06-08 05:44:41.814712	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0778`	vulnerable	2026-06-08 05:39:10.932417	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28400`	vulnerable	2026-06-08 05:23:54.493593	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6569`	vulnerable	2026-06-08 05:14:12.227957	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12736`	vulnerable	2026-06-08 05:08:47.643984	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.