CVE-2022-46144

Medium

Description

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

SeverityMedium

CVSS6.5

Exploit probability—

ProductSiemens 6gk5622-2gs00-2ac2 Firmware

PublishedDec 13, 2022

First seenDec 13, 2022

Weakness typeCWE-664CWE-664

How to fix

Update

siemens 6gk5622-2gs00-2ac2_firmware3.0, 2.3 or later
siemens 6gk5626-2gs00-2ac2_firmware3.0, 2.3 or later
siemens 6gk5632-2gs00-2ac2_firmware3.0, 2.3 or later
siemens 6gk5636-2gs00-2ac2_firmware3.0, 2.3 or later
siemens 6gk5642-2gs00-2ac2_firmware3.0, 2.3 or later
siemens 6gk5646-2gs00-2ac2_firmware3.0, 2.3 or later

Affected products

Product	Affected versions	Fixed in
siemens 6gk5622-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3
siemens 6gk5626-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3
siemens 6gk5632-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3
siemens 6gk5636-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3
siemens 6gk5642-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3
siemens 6gk5646-2gs00-2ac2_firmware	2.3 ≤ v < 3.0, v < 2.3	3.0, 2.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.