CVE-2022-36323
Critical
Description
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
SeverityCritical
CVSS9.1
Exploit probability80. percentile1.9%
ProductSiemens Scalance M-800 Firmware
PublishedAug 10, 2022
First seenAug 10, 2022
Weakness typeCWE-74Injection
How to fix
Update
- siemens scalance_sc-600_firmware2.3.1 or later
- siemens scalance_sc622-2c_firmware2.3.1 or later
- siemens scalance_sc632-2c_firmware2.3.1 or later
- siemens scalance_sc636-2c_firmware2.3.1 or later
- siemens scalance_sc642-2c_firmware2.3.1 or later
- siemens scalance_sc646-2c_firmware2.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens scalance_m-800_firmware | No range specified | — |
| siemens scalance_s615_firmware | No range specified | — |
| siemens scalance_sc-600_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_sc622-2c_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_sc632-2c_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_sc636-2c_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_sc642-2c_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_sc646-2c_firmware | v < 2.3.1 | 2.3.1 |
| siemens scalance_w700_ieee_802.11ax_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11n_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11ac_firmware | No range specified | — |
| siemens scalance_xb-200_firmware | No range specified | — |
| siemens scalance_xb205-3_firmware | No range specified | — |
| siemens scalance_xb205-3ld_firmware | No range specified | — |
| siemens scalance_xb208_firmware | No range specified | — |
| siemens scalance_xb213-3_firmware | No range specified | — |
| siemens scalance_xb213-3ld_firmware | No range specified | — |
| siemens scalance_xb216_firmware | No range specified | — |
| siemens scalance_xc-200_firmware | No range specified | — |
| siemens scalance_xc206-2_firmware | No range specified | — |
| siemens scalance_xc206-2g_poe__firmware | No range specified | — |
| siemens scalance_xc206-2g_poe_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_eec_firmware | No range specified | — |
| siemens scalance_xc208_firmware | No range specified | — |
| siemens scalance_xc208eec_firmware | No range specified | — |
| siemens scalance_xc208g_firmware | No range specified | — |
| siemens scalance_xc208g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc208g_eec_firmware | No range specified | — |
| siemens scalance_xc208g_poe_firmware | No range specified | — |
| siemens scalance_xc216_firmware | No range specified | — |
| siemens scalance_xc216-4c_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xc216eec_firmware | No range specified | — |
| siemens scalance_xc224__firmware | No range specified | — |
| siemens scalance_xc224-4c_g__firmware | No range specified | — |
| siemens scalance_xc224-4c_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc224-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xf-200ba_firmware | No range specified | — |
| siemens scalance_xf204-2ba_dna_firmware | No range specified | — |
| siemens scalance_xf204-2ba_irt_firmware | No range specified | — |
| siemens scalance_xm400_firmware | No range specified | — |
| siemens scalance_xm408-4c_firmware | No range specified | — |
| siemens scalance_xm408-4c_l3_firmware | No range specified | — |
| siemens scalance_xm408-8c_firmware | No range specified | — |
| siemens scalance_xm408-8c_l3_firmware | No range specified | — |
| siemens scalance_xm416-4c_firmware | No range specified | — |
| siemens scalance_xm416-4c_l3_firmware | No range specified | — |
| siemens scalance_xp-200_firmware | No range specified | — |
| siemens scalance_xp208_firmware | No range specified | — |
| siemens scalance_xp208_\(eip\)_firmware | No range specified | — |
| siemens scalance_xp208eec_firmware | No range specified | — |
| siemens scalance_xp208poe_eec_firmware | No range specified | — |
| siemens scalance_xp216_firmware | No range specified | — |
| siemens scalance_xp216_\(eip\)_firmware | No range specified | — |
| siemens scalance_xp216eec_firmware | No range specified | — |
| siemens scalance_xp216poe_eec_firmware | No range specified | — |
| siemens scalance_xr-300_firmware | No range specified | — |
| siemens scalance_xr-300eec_firmware | No range specified | — |
| siemens scalance_xr-300poe_firmware | No range specified | — |
| siemens scalance_xr-300wg_firmware | No range specified | — |
| siemens scalance_xr324-12m_firmware | No range specified | — |
| siemens scalance_xr324-12m_ts_firmware | No range specified | — |
| siemens scalance_xr324-4m_eec_firmware | No range specified | — |
| siemens scalance_xr324-4m_poe_firmware | No range specified | — |
| siemens scalance_xr324-4m_poe_ts_firmware | No range specified | — |
| siemens scalance_xr324wg_firmware | No range specified | — |
| siemens scalance_xr326-2c_poe_wg_firmware | No range specified | — |
| siemens scalance_xr328-4c_wg_firmware | No range specified | — |
| siemens scalance_xr500_firmware | No range specified | — |
| siemens scalance_xr524_firmware | No range specified | — |
| siemens scalance_xr524-8c_firmware | No range specified | — |
| siemens scalance_xr524-8c_l3_firmware | No range specified | — |
| siemens scalance_xr526_firmware | No range specified | — |
| siemens scalance_xr526-8c_firmware | No range specified | — |
| siemens scalance_xr526-8c_l3_firmware | No range specified | — |
| siemens scalance_xr528_firmware | No range specified | — |
| siemens scalance_xr528-6m_firmware | No range specified | — |
| siemens scalance_xr528-6m_2hr2_firmware | No range specified | — |
| siemens scalance_xr528-6m_2hr2_l3_firmware | No range specified | — |
| siemens scalance_xr528-6m_l3_firmware | No range specified | — |
| siemens scalance_xr552_firmware | No range specified | — |
| siemens scalance_xr552-12_firmware | No range specified | — |
| siemens scalance_xr552-12m_firmware | No range specified | — |
| siemens scalance_xr552-12m_2hr2_firmware | No range specified | — |
| siemens scalance_xr552-12m_2hr2_l3_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.