SSA-558014 V1.0: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2

Multiple vulnerabilities in the third-party components cURL, BusyBox, libtirpc, Expat as well as in the Linux Kernel could allow an attacker to impact the SCALANCE XCM332 device’s confidentiality, integrity and availability.

Siemens has released an update for the SCALANCE XCM332 and recommends to update to the latest version.

availability busybox component vulnerabilities confidentiality curl device expat impact integrity kernel latest linux linux kernel party siemens ssa third third-party update version vulnerabilities