Scalance Xf204

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

Published: 2026-05-12T08:20:46.879Z
Updated: 2026-07-14T09:19:07.571Z

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Published: 2024-07-09T12:02:53.001Z
Updated: 2026-06-09T09:01:52.617Z

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Published: 2023-11-14T11:04:02.880Z
Updated: 2026-02-25T16:51:10.886Z

Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.

Published: 2023-11-14T11:03:52.696Z
Updated: 2026-02-25T16:51:11.212Z

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Published: 2022-12-13T00:00:00.000Z
Updated: 2025-01-14T10:27:11.064Z