Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family

Name: Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family
Brand: Siemens

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical118high275medium1low

updated 2026-10-28

vulnerabilities (417)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-36971US	high7.8OT critical	2.70% (86th)	KEV	no fix	2024-06-10	2 versions
CVE-2024-5535US	—	5.58% (93rd)	Exploit	no fix	2024-06-27	≤ vers:intdot/<3.1
CVE-2024-6232US	high7.5	2.20% (82nd)	Exploit	no fix	2024-09-03	2 versions
CVE-2024-36886US	high7.8	1.31% (70th)	Exploit	no fix	2024-05-30	2 versions
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	≤ vers:intdot/<3.2
CVE-2025-21692US	high7.8	0.62% (49th)	Exploit	no fix	2025-02-10	≤ vers:intdot/<3.2
CVE-2024-50251US	medium6.2	0.53% (45th)	Exploit	no fix	2024-11-09	≤ vers:intdot/<3.2
CVE-2024-49882US	high7.8	0.32% (25th)	Exploit	no fix	2024-10-21	2 versions
CVE-2024-6119US	high7.5	66.6% (99th)	—	no fix	2024-09-03	≤ vers:intdot/<3.1
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	≤ vers:intdot/<3.1
CVE-2024-7264US	medium6.5	20.2% (97th)	—	no fix	2024-07-31	≤ vers:intdot/<3.2
CVE-2024-6197US	high7.5	4.30% (91st)	—	no fix	2024-07-24	2 versions
CVE-2024-4741US	—	2.93% (87th)	—	no fix	2024-11-13	2 versions
CVE-2024-9681US	medium6.5	1.99% (81st)	—	no fix	2024-11-06	2 versions
CVE-2024-35960US	—	1.41% (73rd)	—	no fix	2024-05-20	≤ vers:intdot/<3.1
CVE-2024-47685US	critical9.1	1.37% (72nd)	—	no fix	2024-10-21	≤ vers:intdot/<3.2
CVE-2024-35955US	—	1.18% (67th)	—	no fix	2024-05-20	≤ vers:intdot/<3.1
CVE-2024-4603US	—	1.13% (66th)	—	no fix	2024-05-16	2 versions
CVE-2024-49997US	high7.5	1.06% (65th)	—	no fix	2024-10-21	≤ vers:intdot/<3.2
CVE-2023-4039US	medium4.8	1.04% (64th)	—	no fix	2023-09-13	≤ vers:intdot/<3.2
CVE-2024-41040US	high7.0	1.00% (63rd)	—	no fix	2024-07-29	2 versions
CVE-2024-36929US	medium5.5	0.90% (60th)	—	no fix	2024-05-30	≤ vers:intdot/<3.1
CVE-2024-40983US	medium5.5	0.88% (59th)	—	no fix	2024-07-12	2 versions
CVE-2024-41081US	medium5.5	0.87% (59th)	—	no fix	2024-07-29	2 versions
CVE-2024-42145US	medium5.5	0.87% (59th)	—	no fix	2024-07-30	2 versions
CVE-2024-50083US	high7.5	0.87% (59th)	—	no fix	2024-10-29	2 versions
CVE-2024-26924US	—	0.85% (58th)	—	no fix	2024-04-25	2 versions
CVE-2024-38558US	medium5.5	0.82% (57th)	—	no fix	2024-06-19	≤ vers:intdot/<3.1
CVE-2024-38587US	—	0.79% (56th)	—	no fix	2024-06-19	≤ vers:intdot/<3.1
CVE-2024-44998US	high7.8	0.79% (56th)	—	no fix	2024-09-04	2 versions
CVE-2024-6874US	medium4.3	0.79% (56th)	—	no fix	2024-07-24	2 versions
CVE-2024-50033US	high7.1	0.78% (56th)	—	no fix	2024-10-21	≤ vers:intdot/<3.2
CVE-2024-47659US	high8.8	0.78% (56th)	—	no fix	2024-10-09	2 versions
CVE-2024-41007US	low3.3	0.77% (56th)	—	no fix	2024-07-15	2 versions
CVE-2024-34397US	—	0.76% (55th)	—	no fix	2024-05-07	≤ vers:intdot/<3.1
CVE-2024-42232US	medium5.5	0.76% (55th)	—	no fix	2024-08-07	2 versions
CVE-2024-46737US	medium5.5	0.76% (55th)	—	no fix	2024-09-18	2 versions
CVE-2024-40980US	medium5.5	0.76% (55th)	—	no fix	2024-07-12	≤ vers:intdot/<3.1
CVE-2024-36288US	medium5.5	0.75% (55th)	—	no fix	2024-06-21	≤ vers:intdot/<3.1
CVE-2024-36031US	—	0.75% (55th)	—	no fix	2024-05-30	2 versions
CVE-2022-48655US	high7.8	0.74% (55th)	—	no fix	2024-04-28	2 versions
CVE-2024-50095US	medium5.5	0.74% (54th)	—	no fix	2024-11-05	≤ vers:intdot/<3.2
CVE-2024-36916US	high7.1	0.73% (54th)	—	no fix	2024-05-30	≤ vers:intdot/<3.1
CVE-2024-42152US	medium4.7	0.73% (54th)	—	no fix	2024-07-30	2 versions
CVE-2024-35853US	—	0.73% (54th)	—	no fix	2024-05-17	2 versions
CVE-2024-47696US	high7.8	0.73% (54th)	—	no fix	2024-10-21	≤ vers:intdot/<3.2
CVE-2024-53226US	medium5.5	0.73% (54th)	—	no fix	2024-12-27	2 versions
CVE-2024-42247US	medium5.5	0.72% (54th)	—	no fix	2024-08-07	2 versions
CVE-2024-56644US	medium5.5	0.71% (53rd)	—	no fix	2024-12-27	≤ vers:intdot/<3.2
CVE-2024-46763US	medium5.5	0.71% (53rd)	—	no fix	2024-09-18	2 versions

showing 50 of 417

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation245 CVEs
CWE-476NULL Pointer Dereference75 CVEs
CWE-416Use After Free72 CVEs
CWE-667Improper Locking41 CVEs
CWE-125Out-of-bounds Read32 CVEs
CWE-401Missing Release of Memory after Effective Lifetime30 CVEs
CWE-399CWE-39927 CVEs
CWE-787Out-of-bounds Write23 CVEs

sources (2)

Which sources assert this record, and when.

USCISA CSAF OT advisories (ICS)417 CVEs
DESiemens ProductCERT (CSAF)254 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan