siemens scalance x204irt firmware

Name: siemens scalance x204irt firmware
Brand: siemens

productUS

cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high3medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-25226US	critical9.8	1.74% (78th)	—	5.5.0	2021-01-12	< 5.5.0
CVE-2020-15800US	critical9.8	1.67% (77th)	—	5.5.0	2021-01-12	< 5.5.0
CVE-2022-26649US	high7.8	1.36% (72nd)	—	no fix	2022-07-12	—
CVE-2022-26647US	high7.5OT elevated	1.17% (67th)	—	no fix	2022-07-12	—
CVE-2020-28391US	medium5.9OT elevated	1.13% (66th)	—	5.5.0	2021-01-12	< 5.5.0
CVE-2020-15799US	medium6.5OT elevated	1.09% (65th)	—	5.5.0	2021-01-12	< 5.5.0
CVE-2022-26648US	high7.8	0.97% (62nd)	—	no fix	2022-07-12	—
CVE-2022-40631US	medium6.1	0.52% (44th)	—	5.5.0	2022-10-11	< 5.5.0
CVE-2023-29054US	high7.4	0.26% (17th)	—	5.5.2	2023-04-11	< 5.5.2

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-330Use of Insufficiently Random Values1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.