Siemens SCALANCE X202-2IRT

Name: Siemens SCALANCE X202-2IRT
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical8high2medium0low

updated 2026-10-29

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-29998US	critical9.8	2.39% (84th)	—	no fix	2021-04-13	≤ vers:all/*
CVE-2020-28400US	high7.5	1.86% (79th)	—	V5.5.0	2021-07-13	0 → V5.5.0
CVE-2019-13946US	high7.8	1.46% (73rd)	—	V5.3	2020-02-11	All Versions → V5.3
CVE-2013-3634US	high7.5	1.46% (73rd)	—	V5.1.0	2013-05-24	< V5.1.0
CVE-2022-26649US	high7.8	1.36% (72nd)	—	V5.5.2	2022-07-12	All versions → V5.5.2
CVE-2019-19301US	medium5.0	1.36% (72nd)	—	V5.5.0	2020-04-14	All versions → V5.5.0
CVE-2013-3633US	high8.0	1.20% (68th)	—	V5.1.0	2013-05-24	< V5.1.0
CVE-2022-26647US	high7.5OT elevated	1.17% (67th)	—	V5.5.2	2022-07-12	All versions → V5.5.2
CVE-2022-26648US	high7.8	0.97% (62nd)	—	V5.5.2	2022-07-12	All versions → V5.5.2
CVE-2022-40631US	medium6.1	0.52% (44th)	—	V5.5.0	2022-10-11	All versions → V5.5.0
CVE-2023-29054US	high7.4	0.26% (17th)	—	V5.5.2	2023-04-11	All versions → V5.5.2

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-330Use of Insufficiently Random Values1 CVEs
CWE-602Client-Side Enforcement of Server-Side Security1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.