Siemens Scalance X300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Scalance X300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-29998 — CVSS 9.8 (critical): An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.
• CVE-2018-4833 — CVSS 8.8 (high): A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family…
• CVE-2018-13807 — CVSS 8.6 (high): A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All…
• CVE-2017-2680 — CVSS 6.5 (medium): Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment…
• CVE-2017-2681 — CVSS 6.5 (medium): Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service…
• CVE-2018-4848 — CVSS 6.1 (medium): A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT…
• CVE-2018-4842 — CVSS 4.8 (medium): A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE…