Threat Investigation
Request a demo

CVE-2022-26380

High

Description

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device.

SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Scalance X302-7eec Firmware
PublishedApr 12, 2022
First seenApr 12, 2022
Weakness typeCWE-125Out-of-bounds read

How to fix

Update
  • siemens scalance_x302-7eec_firmware4.1.4 or later
  • siemens scalance_x304-2fe_firmware4.1.4 or later
  • siemens scalance_x306-1ldfe_firmware4.1.4 or later
  • siemens scalance_x307-2eec_firmware4.1.4 or later
  • siemens scalance_x307-3_firmware4.1.4 or later
  • siemens scalance_x307-3ld_firmware4.1.4 or later
  • siemens scalance_x308-2_firmware4.1.4 or later
  • siemens scalance_x308-2ld_firmware4.1.4 or later
  • siemens scalance_x308-2lh_firmware4.1.4 or later
  • siemens scalance_x308-2lh\+_firmware4.1.4 or later
  • siemens scalance_x308-2m_firmware4.1.4 or later
  • siemens scalance_x308-2m_ts_firmware4.1.4 or later

Affected products

ProductAffected versionsFixed in
siemens scalance_x302-7eec_firmwarev < 4.1.44.1.4
siemens scalance_x304-2fe_firmwarev < 4.1.44.1.4
siemens scalance_x306-1ldfe_firmwarev < 4.1.44.1.4
siemens scalance_x307-2eec_firmwarev < 4.1.44.1.4
siemens scalance_x307-3_firmwarev < 4.1.44.1.4
siemens scalance_x307-3ld_firmwarev < 4.1.44.1.4
siemens scalance_x308-2_firmwarev < 4.1.44.1.4
siemens scalance_x308-2ld_firmwarev < 4.1.44.1.4
siemens scalance_x308-2lh_firmwarev < 4.1.44.1.4
siemens scalance_x308-2lh\+_firmwarev < 4.1.44.1.4
siemens scalance_x308-2m_firmwarev < 4.1.44.1.4
siemens scalance_x308-2m_poe_firmwareNo range specified—
siemens scalance_x308-2m_ts_firmwarev < 4.1.44.1.4
siemens scalance_x310_firmwarev < 4.1.44.1.4
siemens scalance_x310fe_firmwarev < 4.1.44.1.4
siemens scalance_x320-1fe_firmwarev < 4.1.44.1.4
siemens scalance_x320-1-2ldfe_firmwarev < 4.1.44.1.4
siemens scalance_x408-2_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_eec_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_poe_firmwarev < 4.1.44.1.4
siemens scalance_xr324-4m_poe_ts_firmwarev < 4.1.44.1.4
siemens scalance_xr324-12m_firmwarev < 4.1.44.1.4
siemens scalance_xr324-12m_ts_firmwarev < 4.1.44.1.4
siemens siplus_net_scalance_x308-2_firmwarev < 4.1.44.1.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.