GCVE - cpe:2.3:a:siemens:scalance_xc208g:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:scalance_xc208g:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance Xc208G (`fb74b638-a15c-5fc0-af85-63ae5557dac0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3596`	vulnerable	2026-06-08 06:43:50.749843	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Published: 2024-07-09T12:02:53.001Z Updated: 2026-06-09T09:01:52.617Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2865 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://www.blastradius.fail/ http://www.openwall.com/lists/oss-security/2024/07/09/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44321`	vulnerable	2026-06-08 06:12:40.532901	Details available LOW (2.7) Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again. Published: 2023-11-14T11:04:02.880Z Updated: 2026-02-25T16:51:10.886Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-602936.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44318`	vulnerable	2026-06-08 06:12:40.268930	Details available MEDIUM (4.9) Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file. Published: 2023-11-14T11:03:52.696Z Updated: 2026-02-25T16:51:11.212Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-353002.html https://cert-portal.siemens.com/productcert/html/ssa-690517.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46143`	vulnerable	2026-06-08 05:50:38.162813	Details available LOW (2.7) Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data. Published: 2022-12-13T00:00:00.000Z Updated: 2025-01-14T10:27:11.064Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46142`	vulnerable	2026-06-08 05:50:38.037883	Details available MEDIUM (5.7) Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-21T13:43:06.184Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46140`	vulnerable	2026-06-08 05:50:37.812037	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36325`	vulnerable	2026-06-08 05:46:06.813138	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36324`	vulnerable	2026-06-08 05:46:06.789534	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36323`	vulnerable	2026-06-08 05:46:06.600471	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31765`	vulnerable	2026-06-08 05:44:41.823554	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0778`	vulnerable	2026-06-08 05:39:10.940716	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28400`	vulnerable	2026-06-08 05:23:54.503110	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6569`	vulnerable	2026-06-08 05:14:12.233417	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12736`	vulnerable	2026-06-08 05:08:47.660759	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.