SX
Product
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family
95
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 38Medium 50Low 4
Watch
Add SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9231 | 6.5 | Sep 30 | Timing side-channel in SM2 algorithm on 64 bit ARM Affected: before V3.3 |
| CVE-2024-8096 | 6.5 | Sep 11 | OCSP stapling bypass with GnuTLS Affected: before V3.3 |
| CVE-2024-7264 | 6.5 | Jul 31 | ASN.1 date parser overread Affected: before V3.3; before V3.2 |
| CVE-2024-50251 | 6.2 | Nov 9 | netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Affected: before V3.2 |
| CVE-2025-1390 | 6.1 | Feb 18 | pam_cap: Fix potential configuration parsing error Affected: before V3.3 |
| CVE-2025-9232 | 5.9 | Sep 30 | Out-of-bounds read in HTTP client no_proxy handling Affected: before V3.3 |
| CVE-2024-50602 | 5.9 | Oct 27 | An issue was discovered in libexpat before 2.6.4 Affected: before V3.2 |
| CVE-2025-39865 | 5.5 | Sep 19 | tee: fix NULL pointer dereference in tee_shm_put Affected: before V3.3 |
| CVE-2025-39846 | 5.5 | Sep 19 | pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() Affected: before V3.3 |
| CVE-2025-38498 | 5.5 | Jul 30 | do_change_type(): refuse to operate on unmounted/not ours mounts Affected: before V3.3 |
| CVE-2025-21694 | 5.5 | Feb 12 | fs/proc: fix softlockup in __read_vmcore (part 2) Affected: before V3.2 |
| CVE-2024-48881 | 5.5 | Jan 11 | bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Affected: before V3.2 |
| CVE-2024-56780 | 5.5 | Jan 8 | quota: flush quota_release_work upon quota writeback Affected: before V3.2 |
| CVE-2024-56770 | 5.5 | Jan 8 | net/sched: netem: account for backlog updates from child qdisc Affected: before V3.2 |
| CVE-2024-56644 | 5.5 | Dec 27 | net/ipv6: release expired exception dst cached in socket Affected: before V3.2 |
| CVE-2024-56569 | 5.5 | Dec 27 | ftrace: Fix regression with module command in stack_trace_filter Affected: before V3.2 |
| CVE-2024-53101 | 5.5 | Nov 25 | fs: Fix uninitialized value issue in from_kuid and from_kgid Affected: before V3.2 |
| CVE-2024-50299 | 5.5 | Nov 19 | sctp: properly validate chunk size in sctp_sf_ootb() Affected: before V3.2 |
| CVE-2024-50188 | 5.5 | Nov 8 | net: phy: dp83869: fix memory corruption when enabling fiber Affected: before V3.2 |
| CVE-2024-50095 | 5.5 | Nov 5 | RDMA/mad: Improve handling of timed out WRs of mad agent Affected: before V3.2 |
| CVE-2024-50046 | 5.5 | Oct 21 | NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() Affected: before V3.2 |
| CVE-2024-50045 | 5.5 | Oct 21 | netfilter: br_netfilter: fix panic with metadata_dst skb Affected: before V3.2 |
| CVE-2024-50040 | 5.5 | Oct 21 | igb: Do not bring the device up after non-fatal error Affected: before V3.2 |
| CVE-2024-50039 | 5.5 | Oct 21 | net/sched: accept TCA_STAB only for root qdisc Affected: before V3.2 |
| CVE-2024-50015 | 5.5 | Oct 21 | ext4: dax: fix overflowing extents beyond inode size when partially writing Affected: before V3.2 |
| CVE-2024-50001 | 5.5 | Oct 21 | net/mlx5: Fix error path in multi-packet WQE transmit Affected: before V3.2 |
| CVE-2024-49977 | 5.5 | Oct 21 | net: stmmac: Fix zero-division error when disabling tc cbs Affected: before V3.2 |
| CVE-2024-49955 | 5.5 | Oct 21 | ACPI: battery: Fix possible crash when unregistering a battery hook Affected: before V3.2 |
| CVE-2024-49952 | 5.5 | Oct 21 | netfilter: nf_tables: prevent nf_skb_duplicated corruption Affected: before V3.2 |
| CVE-2024-49949 | 5.5 | Oct 21 | net: avoid potential underflow in qdisc_pkt_len_init() with UFO Affected: before V3.2 |
| CVE-2024-49948 | 5.5 | Oct 21 | net: add more sanity checks to qdisc_pkt_len_init() Affected: before V3.2 |
| CVE-2024-49944 | 5.5 | Oct 21 | sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start Affected: before V3.2 |
| CVE-2024-49881 | 5.5 | Oct 21 | ext4: update orig_path in ext4_find_extent() Affected: before V3.2 |
| CVE-2024-49851 | 5.5 | Oct 21 | tpm: Clean up TPM space after command failure Affected: before V3.2 |
| CVE-2024-47735 | 5.5 | Oct 21 | RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Affected: before V3.2 |
| CVE-2024-47710 | 5.5 | Oct 21 | sock_map: Add a cond_resched() in sock_hash_free() Affected: before V3.2 |
| CVE-2024-47709 | 5.5 | Oct 21 | can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Affected: before V3.2 |
| CVE-2024-47706 | 5.5 | Oct 21 | block, bfq: fix possible UAF for bfqq->bic with merge chain Affected: before V3.2 |
| CVE-2024-47705 | 5.5 | Oct 21 | block: fix potential invalid pointer dereference in blk_add_partition Affected: before V3.2 |
| CVE-2024-47684 | 5.5 | Oct 21 | tcp: check skb is non-NULL in tcp_rto_delta_us() Affected: before V3.2 |
| CVE-2024-46783 | 5.5 | Sep 18 | tcp_bpf: fix return value of tcp_bpf_sendmsg() Affected: before V3.2 |
| CVE-2024-46750 | 5.5 | Sep 18 | PCI: Add missing bridge lock to pci_bus_lock() Affected: before V3.2 |
| CVE-2024-46745 | 5.5 | Sep 18 | Input: uinput - reject requests with unreasonable number of slots Affected: before V3.2 |
| CVE-2024-44990 | 5.5 | Sep 4 | bonding: fix null pointer deref in bond_ipsec_offload_ok Affected: before V3.2 |
| CVE-2024-44989 | 5.5 | Sep 4 | bonding: fix xfrm real_dev null pointer dereference Affected: before V3.2 |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: before V3.3 |
| CVE-2023-4039 | 4.8 | Sep 13 | GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 Affected: before V3.2 |
| CVE-2024-50006 | 4.7 | Oct 21 | ext4: fix i_data_sem unlock order in ext4_ind_migrate() Affected: before V3.2 |
| CVE-2024-47660 | 4.7 | Oct 9 | fsnotify: clear PARENT_WATCHED flags lazily Affected: before V3.2 |
| CVE-2024-46679 | 4.7 | Sep 13 | ethtool: check device is present when getting link settings Affected: before V3.2 |
Showing 50