SCALANCE XRH334 (24 V DC, 8xFO, CC) vulnerabilities

Product

SCALANCE XRH334 (24 V DC, 8xFO, CC)

by Siemens · last CVE Sep 30, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities30 In the news2 Timeline

Severity mix

Critical 1High 12Medium 13Low 4

Severity

All severities30 Critical1 High12 Medium13 Low4

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SCALANCE XRH334 (24 V DC, 8xFO, CC) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-9231	6.5	2%	Sep 30	Timing side-channel in SM2 algorithm on 64 bit ARM Affected: before V3.3
CVE-2025-40567	6.5	0%	Jun 10	A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324… Affected: before V3.2
CVE-2024-8096	6.5	1%	Sep 11	OCSP stapling bypass with GnuTLS Affected: before V3.3
CVE-2024-7264	6.5	20%	Jul 31	ASN.1 date parser overread Affected: before V3.3
CVE-2025-1390	6.1	0%	Feb 18	pam_cap: Fix potential configuration parsing error Affected: before V3.3
CVE-2025-9232	5.9	2%	Sep 30	Out-of-bounds read in HTTP client no_proxy handling Affected: before V3.3
CVE-2025-39865	5.5	0%	Sep 19	tee: fix NULL pointer dereference in tee_shm_put Affected: before V3.3
CVE-2025-39846	5.5	0%	Sep 19	pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() Affected: before V3.3
CVE-2025-38498	5.5	0%	Jul 30	do_change_type(): refuse to operate on unmounted/not ours mounts Affected: before V3.3
CVE-2025-40569	4.8	0%	Jun 10	A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324… Affected: before V3.2
CVE-2025-4373	4.8	1%	May 6	Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: before V3.3
CVE-2025-40568	4.3	1%	Jun 10	A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324… Affected: before V3.2
CVE-2024-41797	4.3	0%	Jun 10	A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4… Affected: before V3.1