Skip to contentSiemens Scalance Xcm328 vulnerabilities
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +27 more +29 moreOut-of-bounds read in HTTP client no_proxy handlingCVE-2025-9232Fix available5.9 Medium
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +20 more +22 moreTiming side-channel in SM2 algorithm on 64 bit ARMCVE-2025-9231Fix available5.9 Medium
- openssl, debian linux, siemens ruggedcom rst2428p +27 more +29 moreOut-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230Fix available9.8 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moretee: fix NULL pointer dereference in tee_shm_putCVE-2025-39865Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morewifi: cfg80211: fix use-after-free in cmp_bss()CVE-2025-39864Fix available8.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moreBluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()CVE-2025-39860Fix available8.0 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morei40e: Fix potential invalid access when MAC list is emptyCVE-2025-39853Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morepcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()CVE-2025-39846Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morescsi: lpfc: Fix buffer free/clear order in deferred receive pathCVE-2025-39841Fix available9.8 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morebatman-adv: fix OOB read/write in network-coding decodeCVE-2025-39839Fix available8.8 High
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +19 more +21 morelibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...CVE-2025-59375Fix available7.5 High
- curl, debian linux, siemens ruggedcom rst2428p +15 more +17 moreOut of bounds read for cookie pathCVE-2025-9086Fix available7.5 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +18 more +20 moredo_change_type(): refuse to operate on unmounted/not ours mountsCVE-2025-38498Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +18 more +20 morenet/sched: Always pass notifications when child class becomes emptyCVE-2025-38350Fix available7.8 High
- gnu ncurses, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +14 more +16 moreGNU ncurses parse_entry.c postprocess_termcap stack-based overflowCVE-2025-6141Fix available4.8 Medium
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...CVE-2025-405695.9 Medium
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...CVE-2025-405685.3 Medium
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...CVE-2025-405677.1 High
- siemens ruggedcom rst2428p, scalance xc316-8, scalance xc324-4 +26 more +28 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1),...CVE-2024-417975.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360Fix available3.7 Low
- openanolis anolis os, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +17 more +19 morepam_cap: Fix potential configuration parsing errorCVE-2025-1390Fix available6.1 Medium
- curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 moregzip integer overflowCVE-2025-0725Fix available7.3 High
- curl, netapp bootstrap os, h300s firmware +23 more +25 moreeventfd double closeCVE-2025-0665Fix available7.0 High
- curl, netapp bootstrap os, element software +32 more +34 morenetrc and default credential leakCVE-2025-0167Fix available3.4 Low
- curl, netapp bootstrap os, h300s firmware +29 more +31 morenetrc and redirect credential leakCVE-2024-11053Fix available3.4 Low
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...CVE-2024-52533Fix available9.8 Critical
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- diffie-hellman key exchange project key exchange, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +16 more +18 moreValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...CVE-2024-41996Fix available7.5 High
- curl, haxx libcurl, siemens ruggedcom rst2428p +19 more +21 moreASN.1 date parser overreadCVE-2024-7264Fix availableEPSS 20.2%6.5 Medium
- ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.CVE-2024-3596Public exploitFix availableEPSS 14.9%9.0 Critical
- busybox, debian linux, siemens ruggedcom rst2428p +16 more +18 moreThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...CVE-2022-48174Fix available9.8 Critical