SS
Product
Scalance Sc642-2c Firmware
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 1
Watch
Add Scalance Sc642-2c Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46140 | 6.5 | Dec 13 | Affected devices use a weak encryption scheme to encrypt the debug zip file Affected: before 2.3 |
| CVE-2022-32206 | 6.5 | Jul 7 | curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms Affected: before 3.0 |
| CVE-2022-46142 | 5.7 | Dec 13 | Affected devices store the CLI user passwords encrypted in flash memory Affected: before 2.3 |
| CVE-2022-36325 | 4.8 | Aug 10 | Affected devices do not properly sanitize data introduced by an user when rendering the web interface Affected: before 2.3.1 |
| CVE-2022-32205 | 4.3 | Jul 7 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them Affected: before 3.0 |
Showing 5