https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:42:35.589976+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1094 certfr-2022-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-02T19:42:35.594398+00:00 certfr-2022-avi-1094 https://cve.radiocsirt.org/vuln/cnvd-2022-87968 cnvd-2022-87968 2026-10-02T19:42:35.594433+00:00 cnvd-2022-87968 https://cve.radiocsirt.org/vuln/euvd-2026-232284 EUVD-2026-232284 2026-10-02T19:42:35.594448+00:00 EUVD-2026-232284 https://cve.radiocsirt.org/vuln/fkie_cve-2022-46351 fkie_cve-2022-46351 2026-10-02T19:42:35.594461+00:00

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

 https://cve.radiocsirt.org/vuln/ghsa-6752-3vj9-575w GHSA-6752-3vj9-575w 2026-10-02T19:42:35.594489+00:00

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

 https://cve.radiocsirt.org/vuln/gsd-2022-46351 gsd-2022-46351 2026-10-02T19:42:35.594515+00:00 gsd-2022-46351 https://cve.radiocsirt.org/vuln/icsa-22-349-02 ICSA-22-349-02 — Siemens SCALANCE X-200RNA Switch Devices 2026-10-02T19:42:35.594525+00:00

The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device. Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances. The affected products are vulnerable to an "Exposure of Sensitive Information to an Unauthorized Actor" vulnerability by leaking sensitive data in the HTTP Referer.