GCVE - cpe:2.3:a:siemens:scalance_xp216:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:scalance_xp216:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance Xp216 (`0d9dfc5f-ff27-50d2-be82-c38bf195d1ac`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3596`	vulnerable	2026-06-08 06:43:50.796093	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Published: 2024-07-09T12:02:53.001Z Updated: 2026-06-09T09:01:52.617Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2865 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://www.blastradius.fail/ http://www.openwall.com/lists/oss-security/2024/07/09/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44321`	vulnerable	2026-06-08 06:12:40.534447	Details available LOW (2.7) Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again. Published: 2023-11-14T11:04:02.880Z Updated: 2026-02-25T16:51:10.886Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-602936.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44318`	vulnerable	2026-06-08 06:12:40.298968	Details available MEDIUM (4.9) Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file. Published: 2023-11-14T11:03:52.696Z Updated: 2026-02-25T16:51:11.212Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-353002.html https://cert-portal.siemens.com/productcert/html/ssa-690517.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46143`	vulnerable	2026-06-08 05:50:38.164592	Details available LOW (2.7) Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data. Published: 2022-12-13T00:00:00.000Z Updated: 2025-01-14T10:27:11.064Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46142`	vulnerable	2026-06-08 05:50:38.041890	Details available MEDIUM (5.7) Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords. Published: 2022-12-13T00:00:00.000Z Updated: 2025-04-21T13:43:06.184Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf https://cert-portal.siemens.com/productcert/html/ssa-413565.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46140`	vulnerable	2026-06-08 05:50:37.838882	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36325`	vulnerable	2026-06-08 05:46:06.814242	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36324`	vulnerable	2026-06-08 05:46:06.790691	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36323`	vulnerable	2026-06-08 05:46:06.621314	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31765`	vulnerable	2026-06-08 05:44:41.850025	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0778`	vulnerable	2026-06-08 05:39:10.969210	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28400`	vulnerable	2026-06-08 05:23:54.537630	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6569`	vulnerable	2026-06-08 05:14:12.250208	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12736`	vulnerable	2026-06-08 05:08:47.683657	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.