Siemens SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)

Name: Siemens SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

27critical92high108medium5low

updated 2026-10-27

vulnerabilities (310)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	2 versions
CVE-2025-32433US	—OT critical	98.9% (100th)	KEV	no fix	2025-04-16	2 versions
CVE-2023-4911US	high7.8OT critical	63.8% (99th)	KEV	no fix	2023-10-03	2 versions
CVE-2022-2586US	high7.8OT critical	10.2% (96th)	KEV	V2.4	2024-01-08	< V2.4
CVE-2025-10585US	critical9.8OT critical	8.97% (95th)	KEV	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	no fix	2025-11-17	≤ vers:unknown/*
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	2 versions
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	2 versions
CVE-2024-2961US	—	88.3% (100th)	Exploit	no fix	2024-04-17	2 versions
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	no fix	2023-10-18	2 versions
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	≤ vers:unknown/*
CVE-2025-0133US	—	46.3% (99th)	Exploit	no fix	2025-05-14	2 versions
CVE-2022-41903US	critical9.8	44.3% (99th)	Exploit	V2.4	2023-01-17	< V2.4
CVE-2022-24834US	high8.8	41.4% (99th)	Exploit	V2.4	2023-07-13	2 versions
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	2 versions
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	≤ vers:unknown/*
CVE-2024-3596US	critical9.0OT high	14.9% (97th)	Exploit	no fix	2024-07-09	2 versions
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	no fix	2025-02-18	3 versions
CVE-2022-41717US	medium5.3	6.08% (93rd)	Exploit	V2.4	2022-12-08	2 versions
CVE-2022-34918US	high7.8	5.45% (93rd)	Exploit	V2.4	2022-07-04	< V2.4
CVE-2023-20593US	medium5.5OT elevated	5.07% (92nd)	Exploit	V2.4	2023-07-24	< V2.4
CVE-2023-6246US	high7.8	4.79% (92nd)	Exploit	no fix	2024-01-31	2 versions
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2023-36664US	high7.8	3.85% (90th)	Exploit	V2.4	2023-06-25	2 versions
CVE-2006-20001US	high7.5	3.55% (89th)	Exploit	V2.4	2023-01-17	< V2.4
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	no fix	2022-01-17	≤ vers:unknown/*
CVE-2021-41617US	high7.0OT elevated	2.54% (85th)	Exploit	no fix	2021-09-26	2 versions
CVE-2022-38725US	high7.5	2.40% (84th)	Exploit	V2.4	2023-01-23	2 versions
CVE-2022-29154US	high7.4OT elevated	2.35% (84th)	Exploit	V2.4	2022-08-02	< V2.4
CVE-2023-24538US	critical9.8	2.28% (83rd)	Exploit	V2.4	2023-04-06	2 versions
CVE-2024-28085US	—	2.24% (83rd)	Exploit	no fix	2024-03-27	2 versions
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	no fix	2024-08-30	2 versions
CVE-2022-3294US	high8.8OT high	1.62% (76th)	Exploit	V2.4	2023-03-01	2 versions
CVE-2023-29409US	medium5.3	1.60% (76th)	Exploit	V2.4	2023-08-02	< V2.4
CVE-2022-1015US	medium6.6	1.49% (74th)	Exploit	V2.4	2022-04-29	< V2.4
CVE-2023-2002US	medium6.8OT elevated	1.47% (74th)	Exploit	V2.4	2023-05-26	2 versions
CVE-2023-29406US	medium6.5	1.45% (73rd)	Exploit	V2.4	2023-07-11	2 versions
CVE-2025-4517US	—	1.43% (73rd)	Exploit	no fix	2025-06-03	2 versions
CVE-2025-4138US	—	1.39% (72nd)	Exploit	no fix	2025-06-03	2 versions
CVE-2026-0273US	high7.2	1.34% (71st)	Exploit	no fix	2026-06-10	≤ vers:unknown/*
CVE-2023-23946US	high7.5	1.14% (66th)	Exploit	V2.4	2023-02-14	2 versions
CVE-2023-3390US	high7.8	0.91% (60th)	Exploit	V2.4	2023-06-28	< V2.4
CVE-2025-21756US	—	0.89% (59th)	Exploit	no fix	2025-02-27	2 versions
CVE-2023-22490US	medium5.5	0.71% (53rd)	Exploit	V2.4	2023-02-14	2 versions
CVE-2023-35828US	high7.0	0.53% (45th)	Exploit	V2.4	2023-06-18	< V2.4
CVE-2023-35788US	high7.8	0.52% (44th)	Exploit	V2.4	2023-06-16	< V2.4
CVE-2023-3776US	high7.8	0.51% (43rd)	Exploit	V2.4	2023-07-21	< V2.4
CVE-2025-5222US	—	0.44% (38th)	Exploit	no fix	2025-05-27	≤ vers:unknown/*
CVE-2023-52927US	high7.8	0.32% (24th)	Exploit	no fix	2025-03-14	2 versions
CVE-2023-4128US	—	—	Exploit	V2.4	2023-08-10	< V2.4

showing 50 of 310

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation56 CVEs
CWE-416Use After Free41 CVEs
CWE-787Out-of-bounds Write37 CVEs
CWE-125Out-of-bounds Read26 CVEs
CWE-311Missing Encryption of Sensitive Data18 CVEs
CWE-190Integer Overflow or Wraparound15 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')15 CVEs
CWE-476NULL Pointer Dereference15 CVEs

sources (3)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan