CVE-2022-36324
High
Description
Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Scalance M-800 Firmware
PublishedAug 10, 2022
First seenAug 10, 2022
Weakness typeCWE-770Allocation of resources without limits
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens scalance_m-800_firmware | No range specified | — |
| siemens scalance_s615_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11ax_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11n_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11ac_firmware | No range specified | — |
| siemens scalance_xb-200_firmware | No range specified | — |
| siemens scalance_xb205-3_firmware | No range specified | — |
| siemens scalance_xb205-3ld_firmware | No range specified | — |
| siemens scalance_xb208_firmware | No range specified | — |
| siemens scalance_xb213-3_firmware | No range specified | — |
| siemens scalance_xb213-3ld_firmware | No range specified | — |
| siemens scalance_xb216_firmware | No range specified | — |
| siemens scalance_xc-200_firmware | No range specified | — |
| siemens scalance_xc206-2_firmware | No range specified | — |
| siemens scalance_xc206-2g_poe__firmware | No range specified | — |
| siemens scalance_xc206-2g_poe_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_eec_firmware | No range specified | — |
| siemens scalance_xc208_firmware | No range specified | — |
| siemens scalance_xc208eec_firmware | No range specified | — |
| siemens scalance_xc208g_firmware | No range specified | — |
| siemens scalance_xc208g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc208g_eec_firmware | No range specified | — |
| siemens scalance_xc208g_poe_firmware | No range specified | — |
| siemens scalance_xc216_firmware | No range specified | — |
| siemens scalance_xc216-4c_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xc216eec_firmware | No range specified | — |
| siemens scalance_xc224__firmware | No range specified | — |
| siemens scalance_xc224-4c_g__firmware | No range specified | — |
| siemens scalance_xc224-4c_g_\(e\/ip\)_firmware | No range specified | — |
| siemens scalance_xc224-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xf-200ba_firmware | No range specified | — |
| siemens scalance_xf204-2ba_dna_firmware | No range specified | — |
| siemens scalance_xf204-2ba_irt_firmware | No range specified | — |
| siemens scalance_xm400_firmware | No range specified | — |
| siemens scalance_xm408-4c_firmware | No range specified | — |
| siemens scalance_xm408-4c_l3_firmware | No range specified | — |
| siemens scalance_xm408-8c_firmware | No range specified | — |
| siemens scalance_xm408-8c_l3_firmware | No range specified | — |
| siemens scalance_xm416-4c_firmware | No range specified | — |
| siemens scalance_xm416-4c_l3_firmware | No range specified | — |
| siemens scalance_xp-200_firmware | No range specified | — |
| siemens scalance_xp208_firmware | No range specified | — |
| siemens scalance_xp208_\(eip\)_firmware | No range specified | — |
| siemens scalance_xp208eec_firmware | No range specified | — |
| siemens scalance_xp208poe_eec_firmware | No range specified | — |
| siemens scalance_xp216_firmware | No range specified | — |
| siemens scalance_xp216_\(eip\)_firmware | No range specified | — |
| siemens scalance_xp216eec_firmware | No range specified | — |
| siemens scalance_xp216poe_eec_firmware | No range specified | — |
| siemens scalance_xr-300_firmware | No range specified | — |
| siemens scalance_xr-300eec_firmware | No range specified | — |
| siemens scalance_xr-300poe_firmware | No range specified | — |
| siemens scalance_xr-300wg_firmware | No range specified | — |
| siemens scalance_xr324-12m_firmware | No range specified | — |
| siemens scalance_xr324-12m_ts_firmware | No range specified | — |
| siemens scalance_xr324-4m_eec_firmware | No range specified | — |
| siemens scalance_xr324-4m_poe_firmware | No range specified | — |
| siemens scalance_xr324-4m_poe_ts_firmware | No range specified | — |
| siemens scalance_xr324wg_firmware | No range specified | — |
| siemens scalance_xr326-2c_poe_wg_firmware | No range specified | — |
| siemens scalance_xr328-4c_wg_firmware | No range specified | — |
| siemens scalance_xr500_firmware | No range specified | — |
| siemens scalance_xr524_firmware | No range specified | — |
| siemens scalance_xr524-8c_firmware | No range specified | — |
| siemens scalance_xr524-8c_l3_firmware | No range specified | — |
| siemens scalance_xr526_firmware | No range specified | — |
| siemens scalance_xr526-8c_firmware | No range specified | — |
| siemens scalance_xr526-8c_l3_firmware | No range specified | — |
| siemens scalance_xr528_firmware | No range specified | — |
| siemens scalance_xr528-6m_firmware | No range specified | — |
| siemens scalance_xr528-6m_2hr2_firmware | No range specified | — |
| siemens scalance_xr528-6m_2hr2_l3_firmware | No range specified | — |
| siemens scalance_xr528-6m_l3_firmware | No range specified | — |
| siemens scalance_xr552_firmware | No range specified | — |
| siemens scalance_xr552-12_firmware | No range specified | — |
| siemens scalance_xr552-12m_firmware | No range specified | — |
| siemens scalance_xr552-12m_2hr2_firmware | No range specified | — |
| siemens scalance_xr552-12m_2hr2_l3_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.