Vulnerabilities > Siemens > Scalance XB 200 Firmware > 5.2.4

DATE CVE VULNERABILITY TITLE RISK
2020-02-11 CVE-2019-13946 Resource Exhaustion vulnerability in Siemens products
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface.
network
low complexity
siemens CWE-400
7.8
2017-12-26 CVE-2017-12736 Improper Initialization vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0.1), RUGGEDCOM ROS for all other devices (All versions < ROS V4.3.4), SCALANCE XB-200/XC-200/XP-200/XR300-WG (All versions between V3.0 (including) and V3.0.2 (excluding)), SCALANCE XR-500/XM-400 (All versions between V6.1 (including) and V6.1.1 (excluding)).
low complexity
siemens CWE-665
5.8