SCALANCE SC622-2C vulnerabilities
5 known vulnerabilities in SCALANCE SC622-2C from Siemens. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Missing Authorization
Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
- 7.5 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Allocation of Resources Without Limits or Throttling
Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
- 7.2 High severity
RUGGEDCOM RM1224 LTE(4G) EU: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
- 9.8 Critical severity
RUGGEDCOM RM1224 LTE(4G) EU: Improper Control of Generation of Code
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M812-1 ADSL-Router (6GK
- 7.5 High severity
OpenSSL: Loop with Unreachable Exit Condition
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex