GCVE - cpe:2.3:h:siemens:scalance_x-300eec:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:scalance_x-300eec:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Scalance X 300Eec (`8550cb2c-2e96-5b86-9fde-cdc19a93f83f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8479`	not_vulnerable	2026-06-08 05:06:08.938012	Details available The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service (reboot) via crafted FTP packets. Published: 2015-01-21T17:00:00.000Z Updated: 2024-08-06T13:18:48.283Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8478`	not_vulnerable	2026-06-08 05:06:08.934082	Details available The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service (reboot) via malformed HTTP requests. Published: 2015-01-21T17:00:00.000Z Updated: 2024-08-06T13:18:48.325Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-321046.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-321046.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1802`	vulnerable	2026-06-08 05:00:50.993177	Details available Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL. Published: 2012-04-18T10:00:00.000Z Updated: 2024-08-06T19:08:38.499Z Open on db.gcve.eu Reference links http://osvdb.org/81032 http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdf http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.