Scalance Xp216G Eec
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:scalance_xp216g_eec:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Scalance Xp216G Eec (be819410-ca41-5116-a910-d2566b96677d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.806437 |
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Published: 2024-07-09T12:02:53.001Z
Updated: 2026-06-09T09:01:52.617Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44321 |
vulnerable | 2026-06-08 06:12:40.534712 |
Details available
LOW (2.7)
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.
Published: 2023-11-14T11:04:02.880Z
Updated: 2026-02-25T16:51:10.886Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44318 |
vulnerable | 2026-06-08 06:12:40.303053 |
Details available
MEDIUM (4.9)
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Published: 2023-11-14T11:03:52.696Z
Updated: 2026-02-25T16:51:11.212Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12736 |
vulnerable | 2026-06-08 05:08:47.686745 |
Details available
HIGH (8.8)
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.
This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
Published: 2017-12-26T04:00:00.000Z
Updated: 2025-08-12T11:10:44.721Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.