Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:scalance_x204rna_eec_(hsr):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductScalance X204Rna Eec (Hsr) (c3e689fa-40a0-5fa1-b8fb-e22cc563f407)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46355 vulnerable 2026-06-08 05:50:38.709296 Details available
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The affected products are vulnerable to an "Exposure of Sensitive Information to an Unauthorized Actor" vulnerability by leaking sensitive data in the HTTP Referer.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T14:40:09.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46354 vulnerable 2026-06-08 05:50:38.707940 Details available
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T14:40:48.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46353 vulnerable 2026-06-08 05:50:38.706576 Details available
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T02:55:31.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46352 vulnerable 2026-06-08 05:50:38.705358 Details available
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T02:57:18.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46351 vulnerable 2026-06-08 05:50:38.704164 Details available
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:00:30.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46350 vulnerable 2026-06-08 05:50:38.695054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3786 vulnerable 2026-06-08 05:48:22.334387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3602 vulnerable 2026-06-08 05:48:21.518676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13933 vulnerable 2026-06-08 05:12:52.493228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10942 vulnerable 2026-06-08 05:12:25.944148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.