Threat Investigation
Request a demo

CVE-2022-25756

Medium

Description

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.

SeverityMedium
CVSS6.1
Exploit probability—
ProductSiemens Scalance X302-7eec Firmware
PublishedApr 12, 2022
First seenApr 12, 2022
Weakness typeCWE-80CWE-80

How to fix

Update
  • siemens scalance_x302-7eec_firmware4.1.4 or later
  • siemens scalance_x304-2fe_firmware4.1.4 or later
  • siemens scalance_x306-1ldfe_firmware4.1.4 or later
  • siemens scalance_x307-2eec_firmware4.1.4 or later
  • siemens scalance_x307-3_firmware4.1.4 or later
  • siemens scalance_x307-3ld_firmware4.1.4 or later
  • siemens scalance_x308-2_firmware4.1.4 or later
  • siemens scalance_x308-2ld_firmware4.1.4 or later
  • siemens scalance_x308-2lh_firmware4.1.4 or later
  • siemens scalance_x308-2lh\+_firmware4.1.4 or later
  • siemens scalance_x308-2m_firmware4.1.4 or later
  • siemens scalance_x308-2m_ts_firmware4.1.4 or later

Affected products

ProductAffected versionsFixed in
siemens scalance_x302-7eec_firmwarev < 4.1.44.1.4
siemens scalance_x304-2fe_firmwarev < 4.1.44.1.4
siemens scalance_x306-1ldfe_firmwarev < 4.1.44.1.4
siemens scalance_x307-2eec_firmwarev < 4.1.44.1.4
siemens scalance_x307-3_firmwarev < 4.1.44.1.4
siemens scalance_x307-3ld_firmwarev < 4.1.44.1.4
siemens scalance_x308-2_firmwarev < 4.1.44.1.4
siemens scalance_x308-2ld_firmwarev < 4.1.44.1.4
siemens scalance_x308-2lh_firmwarev < 4.1.44.1.4
siemens scalance_x308-2lh\+_firmwarev < 4.1.44.1.4
siemens scalance_x308-2m_firmwarev < 4.1.44.1.4
siemens scalance_x308-2m_poe_firmwareNo range specified—
siemens scalance_x308-2m_ts_firmwarev < 4.1.44.1.4
siemens scalance_x310_firmwarev < 4.1.44.1.4
siemens scalance_x310fe_firmwarev < 4.1.44.1.4
siemens scalance_x320-1fe_firmwarev < 4.1.44.1.4
siemens scalance_x320-1-2ldfe_firmwarev < 4.1.44.1.4
siemens scalance_x408-2_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_eec_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_poe_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_poe_ts_firmwarev < 4.1.44.1.4
siemens scalance_xr324-12m_firmwarev < 4.1.44.1.4
siemens scalance_xr324-12m_ts_firmwarev < 4.1.44.1.4
siemens siplus_net_scalance_x308-2_firmwarev < 4.1.44.1.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.