SCALANCE XCM-/XRM-/XCH-/XRH-300 family

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical82high185medium1low

updated 2026-10-22

vulnerabilities (280)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-36971US	high7.8	2.70% (86th)	KEV	no fix	2024-06-10	—
CVE-2024-6232US	high7.5	2.20% (82nd)	Exploit	no fix	2024-09-03	—
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	no fix	2024-05-30	—
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	—
CVE-2024-49882US	high7.8	0.32% (24th)	Exploit	no fix	2024-10-21	—
CVE-2024-7264US	medium6.5	20.2% (97th)	—	no fix	2024-07-31	—
CVE-2024-6197US	high7.5	4.30% (91st)	—	no fix	2024-07-24	—
CVE-2024-4741US	—	2.93% (87th)	—	no fix	2024-11-13	—
CVE-2024-9681US	medium6.5	1.99% (80th)	—	no fix	2024-11-06	—
CVE-2024-4603US	—	1.13% (66th)	—	no fix	2024-05-16	—
CVE-2023-4039US	medium4.8	1.04% (64th)	—	no fix	2023-09-13	—
CVE-2024-41040US	high7.0	1.00% (62nd)	—	no fix	2024-07-29	—
CVE-2024-40983US	medium5.5	0.88% (59th)	—	no fix	2024-07-12	—
CVE-2024-41081US	medium5.5	0.87% (58th)	—	no fix	2024-07-29	—
CVE-2024-42145US	medium5.5	0.87% (58th)	—	no fix	2024-07-30	—
CVE-2024-50083US	high7.5	0.87% (58th)	—	no fix	2024-10-29	—
CVE-2024-26924US	—	0.85% (58th)	—	no fix	2024-04-25	—
CVE-2024-44998US	high7.8	0.79% (56th)	—	no fix	2024-09-04	—
CVE-2024-6874US	medium4.3	0.79% (56th)	—	no fix	2024-07-24	—
CVE-2024-47659US	high8.8	0.78% (55th)	—	no fix	2024-10-09	—
CVE-2024-41007US	low3.3	0.77% (55th)	—	no fix	2024-07-15	—
CVE-2024-42232US	medium5.5	0.76% (55th)	—	no fix	2024-08-07	—
CVE-2024-46737US	medium5.5	0.76% (55th)	—	no fix	2024-09-18	—
CVE-2024-36031US	—	0.75% (54th)	—	no fix	2024-05-30	—
CVE-2022-48655US	high7.8	0.74% (54th)	—	no fix	2024-04-28	—
CVE-2024-42152US	medium4.7	0.73% (54th)	—	no fix	2024-07-30	—
CVE-2024-35853US	—	0.73% (54th)	—	no fix	2024-05-17	—
CVE-2024-53226US	medium5.5	0.73% (54th)	—	no fix	2024-12-27	—
CVE-2024-42247US	medium5.5	0.72% (53rd)	—	no fix	2024-08-07	—
CVE-2024-56644US	medium5.5	0.71% (53rd)	—	no fix	2024-12-27	—
CVE-2024-46763US	medium5.5	0.71% (53rd)	—	no fix	2024-09-18	—
CVE-2024-56645US	medium5.5	0.68% (52nd)	—	no fix	2024-12-27	—
CVE-2024-47739US	medium5.5	0.68% (52nd)	—	no fix	2024-10-21	—
CVE-2023-52887US	medium5.5	0.67% (51st)	—	no fix	2024-07-29	—
CVE-2024-43883US	high7.0	0.65% (50th)	—	no fix	2024-08-23	—
CVE-2024-56662US	medium6.0	0.61% (49th)	—	no fix	2024-12-27	—
CVE-2024-35854US	—	0.58% (47th)	—	no fix	2024-05-17	—
CVE-2024-47749US	medium5.5	0.57% (46th)	—	no fix	2024-10-21	—
CVE-2024-50185US	medium5.5	0.56% (46th)	—	no fix	2024-11-08	—
CVE-2024-56688US	medium5.5	0.54% (45th)	—	no fix	2024-12-28	—
CVE-2024-36964US	medium5.5	0.50% (42nd)	—	no fix	2024-06-03	—
CVE-2024-41046US	high7.8	0.45% (38th)	—	no fix	2024-07-29	—
CVE-2024-26926US	medium5.5	0.44% (38th)	—	no fix	2024-04-25	—
CVE-2024-49982US	high7.8	0.38% (31st)	—	no fix	2024-10-21	—
CVE-2024-50264US	high7.8	0.35% (28th)	—	no fix	2024-11-19	—
CVE-2024-27000US	high7.8	0.33% (24th)	—	no fix	2024-05-01	—
CVE-2024-39495US	high7.8	0.33% (24th)	—	no fix	2024-07-12	—
CVE-2024-53171US	high7.8	0.32% (24th)	—	no fix	2024-12-27	—
CVE-2024-25741US	medium5.5	0.31% (23rd)	—	no fix	2024-02-12	—
CVE-2024-38590US	medium5.5	0.31% (23rd)	—	no fix	2024-06-19	—

showing 50 of 280

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation206 CVEs
CWE-416Use After Free52 CVEs
CWE-476NULL Pointer Dereference46 CVEs
CWE-399CWE-39924 CVEs
CWE-125Out-of-bounds Read22 CVEs
CWE-667Improper Locking22 CVEs
CWE-401Missing Release of Memory after Effective Lifetime21 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer15 CVEs

sources (1)

Which sources assert this record, and when.

USCISA CSAF OT advisories (ICS)280 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan