GCVE - cpe:2.3:a:siemens:scalance_xp216eec_(v2):*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:scalance_xp216eec_(v2):*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance Xp216Eec (V2) (`cdcb98d6-69d1-5f38-9bbb-3f331a802512`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3596`	vulnerable	2026-06-08 06:43:50.798780	RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Published: 2024-07-09T12:02:53.001Z Updated: 2026-06-09T09:01:52.617Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2865 https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf https://www.blastradius.fail/ http://www.openwall.com/lists/oss-security/2024/07/09/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44321`	vulnerable	2026-06-08 06:12:40.534547	Details available LOW (2.7) Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again. Published: 2023-11-14T11:04:02.880Z Updated: 2026-02-25T16:51:10.886Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-602936.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44318`	vulnerable	2026-06-08 06:12:40.301646	Details available MEDIUM (4.9) Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file. Published: 2023-11-14T11:03:52.696Z Updated: 2026-02-25T16:51:11.212Z Open on db.gcve.eu Reference links https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf https://cert-portal.siemens.com/productcert/html/ssa-180704.html https://cert-portal.siemens.com/productcert/html/ssa-353002.html https://cert-portal.siemens.com/productcert/html/ssa-690517.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12736`	vulnerable	2026-06-08 05:08:47.685789	Details available HIGH (8.8) After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions. Published: 2017-12-26T04:00:00.000Z Updated: 2025-08-12T11:10:44.721Z Open on db.gcve.eu Reference links https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856721.pdf http://www.securitytracker.com/id/1039463 http://www.securitytracker.com/id/1039464 http://www.securityfocus.com/bid/101041 https://cert-portal.siemens.com/productcert/html/ssa-856721.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.