SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical54high125medium0low

updated 2026-10-27

vulnerabilities (200)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	no fix	2025-04-16	—
CVE-2025-4517US	—	1.43% (73rd)	Exploit	no fix	2025-06-03	—
CVE-2025-4138US	—	1.39% (72nd)	Exploit	no fix	2025-06-03	—
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	—
CVE-2024-49882US	high7.8	0.32% (25th)	Exploit	no fix	2024-10-21	—
CVE-2024-7264US	medium6.5	20.2% (97th)	—	no fix	2024-07-31	—
CVE-2024-6197US	high7.5	4.30% (91st)	—	no fix	2024-07-24	—
CVE-2024-9681US	medium6.5	1.99% (80th)	—	no fix	2024-11-06	—
CVE-2024-11053US	—	1.97% (80th)	—	no fix	2024-12-11	—
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	—
CVE-2024-52533US	—	1.51% (74th)	—	no fix	2024-11-11	—
CVE-2025-0665US	—	1.33% (71st)	—	no fix	2025-02-05	—
CVE-2023-4039US	medium4.8	1.04% (64th)	—	no fix	2023-09-13	—
CVE-2025-4330US	—	0.94% (61st)	—	no fix	2025-06-03	—
CVE-2024-50083US	high7.5	0.87% (59th)	—	no fix	2024-10-29	—
CVE-2024-8096US	—	0.82% (57th)	—	no fix	2024-09-11	—
CVE-2024-6874US	medium4.3	0.79% (56th)	—	no fix	2024-07-24	—
CVE-2024-47659US	high8.8	0.78% (56th)	—	no fix	2024-10-09	—
CVE-2024-12718US	—	0.77% (55th)	—	no fix	2025-06-03	—
CVE-2023-39810US	high7.8	0.77% (55th)	—	no fix	2023-08-28	—
CVE-2024-46737US	medium5.5	0.76% (55th)	—	no fix	2024-09-18	—
CVE-2025-0167US	—	0.75% (55th)	—	no fix	2025-02-05	—
CVE-2024-53226US	medium5.5	0.73% (54th)	—	no fix	2024-12-27	—
CVE-2024-56644US	medium5.5	0.71% (53rd)	—	no fix	2024-12-27	—
CVE-2024-46763US	medium5.5	0.71% (53rd)	—	no fix	2024-09-18	—
CVE-2024-56645US	medium5.5	0.68% (52nd)	—	no fix	2024-12-27	—
CVE-2024-47739US	medium5.5	0.68% (52nd)	—	no fix	2024-10-21	—
CVE-2025-3360US	—	0.65% (51st)	—	no fix	2025-04-07	—
CVE-2024-56662US	medium6.0	0.61% (49th)	—	no fix	2024-12-27	—
CVE-2025-4435US	—	0.59% (48th)	—	no fix	2025-06-03	—
CVE-2024-47749US	medium5.5	0.57% (47th)	—	no fix	2024-10-21	—
CVE-2024-50185US	medium5.5	0.56% (47th)	—	no fix	2024-11-08	—
CVE-2024-56688US	medium5.5	0.54% (45th)	—	no fix	2024-12-28	—
CVE-2025-10148US	—	0.52% (44th)	—	no fix	2025-09-12	—
CVE-2025-27587US	—	0.45% (39th)	—	no fix	2025-06-16	—
CVE-2023-42364US	medium5.5	0.43% (37th)	—	no fix	2023-11-27	—
CVE-2023-42363US	medium5.5	0.42% (36th)	—	no fix	2023-11-27	—
CVE-2023-42366US	medium5.5	0.42% (36th)	—	no fix	2023-11-27	—
CVE-2023-42365US	medium5.5	0.39% (33rd)	—	no fix	2023-11-27	—
CVE-2024-49982US	high7.8	0.38% (32nd)	—	no fix	2024-10-21	—
CVE-2024-47619US	—	0.37% (31st)	—	no fix	2025-05-07	—
CVE-2024-50264US	high7.8	0.35% (29th)	—	no fix	2024-11-19	—
CVE-2024-53171US	high7.8	0.32% (25th)	—	no fix	2024-12-27	—
CVE-2024-53061US	high7.8	0.30% (23rd)	—	no fix	2024-11-19	—
CVE-2024-46713US	high7.8	0.30% (23rd)	—	no fix	2024-09-13	—
CVE-2024-49878US	medium5.5	0.30% (22nd)	—	no fix	2024-10-21	—
CVE-2024-46800US	high7.8	0.30% (22nd)	—	no fix	2024-09-18	—
CVE-2024-53158US	medium5.5	0.29% (21st)	—	no fix	2024-12-24	—
CVE-2024-47742US	high7.8	0.29% (21st)	—	no fix	2024-10-21	—
CVE-2024-46740US	high7.8	0.29% (21st)	—	no fix	2024-09-18	—

showing 50 of 200

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation133 CVEs
CWE-416Use After Free39 CVEs
CWE-476NULL Pointer Dereference34 CVEs
CWE-399CWE-39916 CVEs
CWE-667Improper Locking15 CVEs
CWE-125Out-of-bounds Read13 CVEs
CWE-401Missing Release of Memory after Effective Lifetime10 CVEs
CWE-415Double Free9 CVEs

sources (1)

Which sources assert this record, and when.

USCISA CSAF OT advisories (ICS)200 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan