Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder
Developer API

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Log in Start free

Home
Vendors
Siemens
Scalance Xcm332

Siemens SCALANCE XCM332 Vulnerabilities: CVEs, CISA KEV & Security Advisories

24 CVEs

1 in CISA KEV

Siemens SCALANCE XCM332 Vulnerabilities

CVE security advisories and vulnerability history for SCALANCE XCM332 by Siemens.

24

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.8

Avg CVSS

2023–2025

Last updated September 30, 2025

Overview

Siemens SCALANCE XCM332 has 24 published CVE records since 2023, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Siemens SCALANCE XCM332, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Siemens SCALANCE XCM332's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High11

Medium11

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Siemens SCALANCE XCM332's CVEs is confirmed exploited in the wild.

Public exploits

1

One of Siemens SCALANCE XCM332's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Siemens SCALANCE XCM332 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< V3.318 CVEs
< V3.24 CVEs
< V3.11 CVE

Fixed in

V3.318 CVEs
V3.24 CVEs
V3.11 CVE

Find a version

24 CVEs

Sort

Out-of-bounds read in HTTP client no_proxy handling
CVE-2025-9232
Patch
CWE-125
Medium · CVSS 5.9
EPSS 2.3% (81th pct)2025-09-30
Timing side-channel in SM2 algorithm on 64 bit ARM
CVE-2025-9231
Patch
CWE-385
Medium · CVSS 6.5
EPSS 2.2% (81th pct)2025-09-30
Out-of-bounds read & write in RFC 3211 KEK Unwrap
CVE-2025-9230
Patch
CWE-125
High · CVSS 7.5
EPSS 1.7% (75th pct)2025-09-30
tee: fix NULL pointer dereference in tee_shm_put
CVE-2025-39865
Patch
Medium · CVSS 5.5
EPSS 0.1% (5th pct)2025-09-19
wifi: cfg80211: fix use-after-free in cmp_bss()
CVE-2025-39864
Patch
High · CVSS 7.8
EPSS 0.2% (5th pct)2025-09-19
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
CVE-2025-39860
Patch
High · CVSS 7.8
EPSS 0.2% (5th pct)2025-09-19
i40e: Fix potential invalid access when MAC list is empty
CVE-2025-39853
Patch
High · CVSS 7.1
EPSS 0.2% (5th pct)2025-09-19
pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
CVE-2025-39846
Patch
Medium · CVSS 5.5
EPSS 0.1% (5th pct)2025-09-19
scsi: lpfc: Fix buffer free/clear order in deferred receive path
CVE-2025-39841
Patch
High · CVSS 7.8
EPSS 0.2% (6th pct)2025-09-19
batman-adv: fix OOB read/write in network-coding decode
CVE-2025-39839
Patch
High · CVSS 7.1
EPSS 0.2% (6th pct)2025-09-19
High vulnerability · 2025-09-15
CVE-2025-59375
Patch
CWE-770
High · CVSS 7.5
EPSS 1.3% (67th pct)2025-09-15
Out of bounds read for cookie path
CVE-2025-9086
Patch
High · CVSS 7.5
EPSS 1.3% (68th pct)2025-09-12
do_change_type(): refuse to operate on unmounted/not ours mounts
CVE-2025-38498
Patch
Medium · CVSS 5.5
EPSS 0.2% (6th pct)2025-07-30
net/sched: Always pass notifications when child class becomes empty
CVE-2025-38350
Patch
High · CVSS 7.8
EPSS 0.2% (8th pct)2025-07-19
GNU ncurses parse_entry.c postprocess_termcap stack-based overflow
CVE-2025-6141
Patch
CWE-119
Medium · CVSS 4.8
EPSS 0.2% (6th pct)2025-06-16
Medium vulnerability · 2025-06-10
CVE-2025-40569
Patch
CWE-362
Medium · CVSS 5.9
EPSS 0.2% (16th pct)2025-06-10
Medium vulnerability · 2025-06-10
CVE-2025-40568
Patch
CWE-863
Medium · CVSS 5.3
EPSS 0.5% (37th pct)2025-06-10
High vulnerability · 2025-06-10
CVE-2025-40567
Patch
CWE-863
High · CVSS 7.1
EPSS 0.4% (31th pct)2025-06-10
Medium vulnerability · 2025-06-10
CVE-2024-41797
Patch
CWE-269
Medium · CVSS 5.3
EPSS 0.3% (24th pct)2025-06-10
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
CVE-2025-4373
Patch
CWE-124
Medium · CVSS 4.8
EPSS 0.5% (40th pct)2025-05-06
HID: core: zero-initialize the report buffer
CVE-2024-50302
CISA KEV
Public exploit
Patch
CWE-908
Added to CISA KEV 2025-03-04
Medium · CVSS 6.8
EPSS 0.8% (53th pct)2024-11-19
High vulnerability · 2024-08-26
CVE-2024-41996
Patch
CWE-295
High · CVSS 7.5
EPSS 1.1% (62th pct)2024-08-26
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
CVE-2024-3596
Patch
Critical · CVSS 9.0
EPSS 14.9% (96th pct)2024-07-09
Critical vulnerability · 2023-08-22
CVE-2022-48174
Patch
Critical · CVSS 9.8
EPSS 3.1% (87th pct)2023-08-22

Common weakness types

The CWE weakness categories most often found in Siemens SCALANCE XCM332 CVEs. Follow any weakness for its full explanation.

CWE-863Incorrect Authorization2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-269Improper Privilege Management1 CVE
CWE-295Improper Certificate Validation1 CVE
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVE
CWE-385Covert Timing Channel1 CVE
CWE-770Allocation of Resources Without Limits or Throttling1 CVE
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVE

Disclosure activity by year

How many Siemens SCALANCE XCM332 CVEs were published each year.

2023

1

2024

3

2025

20

Other Siemens products

Browse vulnerabilities for other products by Siemens.

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP571 CVEs SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP569 CVEs SIPLUS S7-1500 CPU 1518-4 PN/DP MFP569 CVEs SIMATIC S7-1500 TM MFP - GNU/Linux subsystem455 CVEs RUGGEDCOM RST2428P276 CVEs SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family197 CVEs teamcenter visualization189 CVEs SIMATIC CN 4100186 CVEs

All Siemens vulnerabilities

Frequently asked questions

Common questions about Siemens SCALANCE XCM332 vulnerabilities.

How many CVEs does Siemens SCALANCE XCM332 have?: Siemens SCALANCE XCM332 has 24 published CVE records since 2023.
How many Siemens SCALANCE XCM332 CVEs are in CISA KEV?: Yes — 1 of Siemens SCALANCE XCM332's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Siemens SCALANCE XCM332 vulnerabilities?: Yes — 1 of Siemens SCALANCE XCM332's CVEs have a known public exploit.
Which versions of Siemens SCALANCE XCM332 are affected?: 6 distinct Siemens SCALANCE XCM332 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Siemens SCALANCE XCM332 CVEs?: Siemens SCALANCE XCM332's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-125 (Out-of-bounds Read), CWE-269 (Improper Privilege Management), CWE-295 (Improper Certificate Validation).
How many critical Siemens SCALANCE XCM332 vulnerabilities are there?: Siemens SCALANCE XCM332 has 2 critical and 11 high-severity CVEs.
What is the average severity of Siemens SCALANCE XCM332 CVEs?: The average CVSS base score across Siemens SCALANCE XCM332's scored CVEs is 6.8.

References

All Siemens vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Siemens SCALANCE XCM332 vulnerabilities

Monitor new Siemens SCALANCE XCM332 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References