SS
Product
Scalance Sc626-2c Firmware
7
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch
Add Scalance Sc626-2c Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-30065 | 7.8 | May 18 | A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function Affected: before 3.0 |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: before 3.0 |
| CVE-2022-46140 | 6.5 | Dec 13 | Affected devices use a weak encryption scheme to encrypt the debug zip file Affected: before 2.3 |
| CVE-2022-32206 | 6.5 | Jul 7 | curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms Affected: before 3.0 |
| CVE-2022-46142 | 5.7 | Dec 13 | Affected devices store the CLI user passwords encrypted in flash memory Affected: before 2.3 |
| CVE-2022-32205 | 4.3 | Jul 7 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them Affected: before 3.0 |
| CVE-2022-46143 | 2.7 | Dec 13 | Affected devices do not check the TFTP blocksize correctly Affected: before 2.3 |
Showing 7