Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HSiemens Scalance M 800
HWSiemensall versionsSiemens Scalance M 800 Firmware
OSSiemensall versionsSiemens Scalance S615
HWSiemensall versionsSiemens Scalance S615 Firmware
OSSiemensall versionsSiemens Scalance Sc 600
HWSiemensall versionsSiemens Scalance Sc 600 Firmware
OSSiemens< 2.3.1Siemens Scalance Sc622 2c
HWSiemensall versionsSiemens Scalance Sc622 2c Firmware
OSSiemens< 2.3.1Siemens Scalance Sc632 2c
HWSiemensall versionsSiemens Scalance Sc632 2c Firmware
OSSiemens< 2.3.1Siemens Scalance Sc636 2c
HWSiemensall versionsSiemens Scalance Sc636 2c Firmware
OSSiemens< 2.3.1Siemens Scalance Sc642 2c
HWSiemensall versionsSiemens Scalance Sc642 2c Firmware
OSSiemens< 2.3.1Siemens Scalance Sc646 2c
HWSiemensall versionsSiemens Scalance Sc646 2c Firmware
OSSiemens< 2.3.1Siemens Scalance W700 Ieee 802.11ac
HWSiemensall versionsSiemens Scalance W700 Ieee 802.11ac Firmware
OSSiemensall versionsSiemens Scalance W700 Ieee 802.11ax
HWSiemensall versionsSiemens Scalance W700 Ieee 802.11ax Firmware
OSSiemensall versionsSiemens Scalance W700 Ieee 802.11n
HWSiemensall versionsSiemens Scalance W700 Ieee 802.11n Firmware
OSSiemensall versionsSiemens Scalance Xb 200
HWSiemensall versionsSiemens Scalance Xb 200 Firmware
OSSiemensall versionsSiemens Scalance Xb205 3
HWSiemensall versionsSiemens Scalance Xb205 3 Firmware
OSSiemensall versionsSiemens Scalance Xb205 3ld
HWSiemensall versionsSiemens Scalance Xb205 3ld Firmware
OSSiemensall versionsSiemens Scalance Xb208
HWSiemensall versionsSiemens Scalance Xb208 Firmware
OSSiemensall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-26649CRITICAL9.6PL ✓same product
Siemens SCALANCE X — błędna walidacja URI powodująca crash urządzenia
CVE-2021-25668CRITICAL9.8PL ✓same product
Siemens SCALANCE X200/X204 — heap buffer overflow przez żądania POST
CVE-2021-25669CRITICAL9.8PL ✓same product
Stack-based buffer overflow w serwerze HTTP urządzeń Siemens SCALANCE X200
CVE-2021-29998CRITICAL9.8PL ✓same product
Heap overflow w kliencie DHCP systemu Wind River VxWorks
CVE-2020-15800CRITICAL9.8PL ✓same product
Heap overflow w serwerze webowym przełączników Siemens SCALANCE