Scalance w-700

This hub aggregates every CVE we track for Scalance w-700, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Scalance w-700.

• CVE-2022-36325Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject cod...6.8Aug 10, 2022
• CVE-2022-36324Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of...7.5Aug 10, 2022
• CVE-2022-36323Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.9.1Aug 10, 2022
• CVE-2019-11478SACK can cause extensive memory use via fragmented resend queue5.3Jun 18, 2019
• CVE-2019-11479Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced...7.5Jun 18, 2019
• CVE-2019-11477Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs7.5Jun 18, 2019