SX
Product
SCALANCE XCM-/XRM-/XCH-/XRH-300 family
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 108Low 0
Watch
Add SCALANCE XCM-/XRM-/XCH-/XRH-300 family to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45491 | 9.8 | Aug 30 | An issue was discovered in libexpat before 2.6.3 Affected: before V3.1 |
| CVE-2024-45492 | 9.8 | Aug 30 | An issue was discovered in libexpat before 2.6.3 Affected: before V3.1 |
| CVE-2024-47685 | 9.1 | Oct 21 | netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() Affected: before V3.2 |
| CVE-2024-5535 | 9.1 | Jun 27 | SSL_select_next_proto buffer overread Affected: before V3.1 |
| CVE-2024-35960 | 9.1 | May 20 | net/mlx5: Properly link new fs rules into the tree Affected: before V3.1 |
| CVE-2024-35969 | 8.8 | May 20 | ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Affected: before V3.1 |
| CVE-2024-35955 | 8.8 | May 20 | kprobes: Fix possible use-after-free issue on kprobe registration Affected: before V3.1 |
| CVE-2024-57951 | 7.8 | Feb 12 | hrtimers: Handle CPU state correctly on hotplug Affected: before V3.2 |
| CVE-2025-21692 | 7.8 | Feb 10 | net: sched: fix ets qdisc OOB Indexing Affected: before V3.2 |
| CVE-2024-56606 | 7.8 | Dec 27 | af_packet: avoid erroring out after sock_init_data() in packet_create() Affected: before V3.2 |
| CVE-2024-56601 | 7.8 | Dec 27 | net: inet: do not leave a dangling sk pointer in inet_create() Affected: before V3.2 |
| CVE-2024-56600 | 7.8 | Dec 27 | net: inet6: do not leave a dangling sk pointer in inet6_create() Affected: before V3.2 |
| CVE-2024-56570 | 7.8 | Dec 27 | ovl: Filter invalid inodes with missing lookup function Affected: before V3.2 |
| CVE-2024-53165 | 7.8 | Dec 27 | sh: intc: Fix use-after-free bug in register_intc_controller() Affected: before V3.2 |
| CVE-2024-53057 | 7.8 | Nov 19 | net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Affected: before V3.2 |
| CVE-2024-50262 | 7.8 | Nov 9 | bpf: Fix out-of-bounds write in trie_get_next_key() Affected: before V3.2 |
| CVE-2024-49982 | 7.8 | Oct 21 | aoe: fix the potential use-after-free problem in more places Affected: before V3.2 |
| CVE-2024-49889 | 7.8 | Oct 21 | ext4: avoid use-after-free in ext4_ext_show_leaf() Affected: before V3.2 |
| CVE-2024-49884 | 7.8 | Oct 21 | ext4: fix slab-use-after-free in ext4_split_extent_at() Affected: before V3.2 |
| CVE-2024-47701 | 7.8 | Oct 21 | ext4: avoid OOB when system.data xattr changes underneath the filesystem Affected: before V3.2 |
| CVE-2024-47696 | 7.8 | Oct 21 | RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency Affected: before V3.2 |
| CVE-2024-46759 | 7.8 | Sep 18 | hwmon: (adc128d818) Fix underflows seen when writing limit attributes Affected: before V3.2 |
| CVE-2024-46744 | 7.8 | Sep 18 | Squashfs: sanity check symbolic link size Affected: before V3.2 |
| CVE-2024-44987 | 7.8 | Sep 4 | ipv6: prevent UAF in ip6_send_skb() Affected: before V3.1; before V3.2 |
| CVE-2024-41046 | 7.8 | Jul 29 | net: ethernet: lantiq_etop: fix double free in detach Affected: before V3.1 |
| CVE-2024-41000 | 7.8 | Jul 12 | block/ioctl: prefer different overflow check Affected: before V3.1 |
| CVE-2024-40958 | 7.8 | Jul 12 | netns: Make get_net_ns() handle zero refcount net Affected: before V3.1 |
| CVE-2024-39502 | 7.8 | Jul 12 | ionic: fix use after netif_napi_del() Affected: before V3.1 |
| CVE-2024-38587 | 7.8 | Jun 19 | speakup: Fix sizeof() vs ARRAY_SIZE() bug Affected: before V3.1 |
| CVE-2024-38578 | 7.8 | Jun 19 | ecryptfs: Fix buffer size for tag 66 packet Affected: before V3.1 |
| CVE-2024-36978 | 7.8 | Jun 19 | net: sched: sch_multiq: fix possible OOB write in multiq_tune() Affected: before V3.1 |
| CVE-2024-36974 | 7.8 | Jun 18 | net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP Affected: before V3.1 |
| CVE-2024-36940 | 7.8 | May 30 | pinctrl: core: delete incorrect free in pinctrl_enable() Affected: before V3.1 |
| CVE-2024-36934 | 7.8 | May 30 | bna: ensure the copied buf is NUL terminated Affected: before V3.1 |
| CVE-2024-36904 | 7.8 | May 30 | tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Affected: before V3.1 |
| CVE-2024-27396 | 7.8 | May 9 | net: gtp: Fix Use-After-Free in gtp_dellink Affected: before V3.1 |
| CVE-2024-27395 | 7.8 | May 9 | net: openvswitch: Fix Use-After-Free in ovs_ct_exit Affected: before V3.1 |
| CVE-2024-26988 | 7.8 | May 1 | init/main.c: Fix potential static_command_line memory overflow Affected: before V3.1 |
| CVE-2024-8176 | 7.5 | Mar 14 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat Affected: before V3.2 |
| CVE-2024-49997 | 7.5 | Oct 21 | net: ethernet: lantiq_etop: fix memory disclosure Affected: before V3.2 |
| CVE-2024-6119 | 7.5 | Sep 3 | Possible denial of service in X.509 name checks Affected: before V3.1 |
| CVE-2024-45490 | 7.5 | Aug 30 | An issue was discovered in libexpat before 2.6.3 Affected: before V3.1 |
| CVE-2024-42093 | 7.3 | Jul 29 | net/dpaa2: Avoid explicit cpumask var allocation on stack Affected: before V3.1 |
| CVE-2024-52332 | 7.1 | Jan 11 | igb: Fix potential invalid memory access in igb_init_module() Affected: before V3.2 |
| CVE-2024-56650 | 7.1 | Dec 27 | netfilter: x_tables: fix LED ID check in led_tg_check() Affected: before V3.2 |
| CVE-2024-50301 | 7.1 | Nov 19 | security/keys: fix slab-out-of-bounds in key_task_permission Affected: before V3.2 |
| CVE-2024-50035 | 7.1 | Oct 21 | ppp: fix ppp_async_encode() illegal access Affected: before V3.2 |
| CVE-2024-50033 | 7.1 | Oct 21 | slip: make slhc_remember() more robust against malicious packets Affected: before V3.2 |
| CVE-2024-46743 | 7.1 | Sep 18 | of/irq: Prevent device address out-of-bounds read in interrupt map walk Affected: before V3.2 |
| CVE-2024-42094 | 7.1 | Jul 29 | net/iucv: Avoid explicit cpumask var allocation on stack Affected: before V3.1 |