CVE-2021-37182

mediumpriority · track · 30EPSS 0.006 · 50 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.63% (50th) EPSS

CVSS 4.3 · medium

Is it mine?

124 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSCALANCE XM408-4Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-4C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-8Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-8C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM416-4Csiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM416-4C (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 1x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 1x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 24Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 24V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 2x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 2x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 1x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 1x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 24Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 24V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 2x230Vsiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 2x230V (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6Msiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (2HR2)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (2HR2, L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12Msiemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12M (2HR2)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12M (2HR2, L3 int.)siemens_psirt
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-4Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-4C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-8Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM408-8C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM416-4Ccisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XM416-4C (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 1x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 1x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 24Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 24V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 2x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR524-8C, 2x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 1x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 1x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 24Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 24V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 2x230Vcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR526-8C, 2x230V (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6Mcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (2HR2)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (2HR2, L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR528-6M (L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12Mcisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12M (2HR2)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
FixedSCALANCE XR552-12M (2HR2, L3 int.)cisa_csaf_ot
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
MitigationSCALANCE XM408-4Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-4C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-8Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-8C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM416-4Csiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM416-4C (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 1x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 1x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 24Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 24V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 2x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 2x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 1x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 1x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 24Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 24V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 2x230Vsiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 2x230V (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6Msiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (2HR2)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (2HR2, L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12Msiemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12M (2HR2)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12M (2HR2, L3 int.)siemens_psirt
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-4Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-4C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-8Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM408-8C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM416-4Ccisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XM416-4C (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 1x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 1x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 24Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 24V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 2x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR524-8C, 2x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 1x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 1x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 24Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 24V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 2x230Vcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR526-8C, 2x230V (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6Mcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (2HR2)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (2HR2, L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR528-6M (L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12Mcisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12M (2HR2)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
MitigationSCALANCE XR552-12M (2HR2, L3 int.)cisa_csaf_ot
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.5

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-354USprimaryCWE-354USCWE-354USCWE-354US

affected products (124)

Products and version ranges known to be affected.

SCALANCE XM408-4Call versionscisa_csaf_otUS
SCALANCE XM408-4C (L3 int.)all versionscisa_csaf_otUS
SCALANCE XM408-8Call versionscisa_csaf_otUS
SCALANCE XM408-8C (L3 int.)all versionscisa_csaf_otUS
SCALANCE XM416-4Call versionscisa_csaf_otUS
SCALANCE XM416-4C (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR524-8C, 1x230Vall versionscisa_csaf_otUS
SCALANCE XR524-8C, 1x230V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR524-8C, 24Vall versionscisa_csaf_otUS
SCALANCE XR524-8C, 24V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR524-8C, 2x230Vall versionscisa_csaf_otUS
SCALANCE XR524-8C, 2x230V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR526-8C, 1x230Vall versionscisa_csaf_otUS
SCALANCE XR526-8C, 1x230V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR526-8C, 24Vall versionscisa_csaf_otUS
SCALANCE XR526-8C, 24V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR526-8C, 2x230Vall versionscisa_csaf_otUS
SCALANCE XR526-8C, 2x230V (L3 int.)all versionscisa_csaf_otUS
SCALANCE XR528-6Mall versionscisa_csaf_otUS
SCALANCE XR528-6M (2HR2)all versionscisa_csaf_otUS

showing 20 of 124

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-145224SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices2022-06-14csaf · siemens_psirtDE
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-22-167-10Siemens SCALANCE XM-400 and XR-5002022-06-14icsa · cisa_csaf_otUS
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2022-06-14modified 2026-06-17

related (412)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	2023-12-18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet…
CVE-2024-3596US	critical9.0OT high	14.9% (97th)	Exploit	2024-07-09
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any ot…
CVE-2023-33668US	critical9.8	0.52% (44th)	Exploit	2023-07-12
DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.
CVE-2019-1166US	medium5.9	68.1% (99th)	—	2019-10-10
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windo…
CVE-2026-49230US	critical9.1	0.30% (22nd)	Exploit	2026-06-19
Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass. This issue…

+407 more

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan