CVE-2022-36323

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:siemens:scalance_w700_ieee_802.11ax_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w700_ieee_802.11ax:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:siemens:scalance_w700_ieee_802.11ac_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w700_ieee_802.11ac:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:siemens:scalance_xb205-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb205-3:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:siemens:scalance_xb205-3ld_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb205-3ld:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:siemens:scalance_xb208_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb208:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:siemens:scalance_xb213-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb213-3:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:siemens:scalance_xb213-3ld_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb213-3ld:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:siemens:scalance_xb216_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb216:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2g_poe__firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2g_poe_:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2g_poe_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2g_poe_eec:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2sfp_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2sfp_eec:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2sfp_g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2sfp_g:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2sfp_g_\(e\/ip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2sfp_g_\(e\/ip\):-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:siemens:scalance_xc206-2sfp_g_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc206-2sfp_g_eec:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208eec:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208g:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208g_\(e\/ip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208g_\(e\/ip\):-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208g_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208g_eec:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:siemens:scalance_xc208g_poe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc208g_poe:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216-4c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216-4c:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216-4c_g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216-4c_g:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216-4c_g_\(e\/ip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216-4c_g_\(e\/ip\):-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216-4c_g_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216-4c_g_eec:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:siemens:scalance_xc216eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc216eec:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:siemens:scalance_xc224__firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc224_:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND

cpe:2.3:o:siemens:scalance_xc224-4c_g__firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc224-4c_g_:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND

cpe:2.3:o:siemens:scalance_xc224-4c_g_\(e\/ip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc224-4c_g_\(e\/ip\):-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND

cpe:2.3:o:siemens:scalance_xc224-4c_g_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc224-4c_g_eec:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND

cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND

cpe:2.3:o:siemens:scalance_xf204-2ba_dna_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xf204-2ba_dna:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND

cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND

cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND

cpe:2.3:o:siemens:scalance_xm408-4c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm408-4c:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND

cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND

cpe:2.3:o:siemens:scalance_xm408-8c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm408-8c:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND

cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND

cpe:2.3:o:siemens:scalance_xm416-4c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm416-4c:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND

cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND

cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND

cpe:2.3:o:siemens:scalance_xp208_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp208:-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND

cpe:2.3:o:siemens:scalance_xp208_\(eip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp208_\(eip\):-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND

cpe:2.3:o:siemens:scalance_xp208eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp208eec:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND

cpe:2.3:o:siemens:scalance_xp208poe_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp208poe_eec:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND

cpe:2.3:o:siemens:scalance_xp216_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp216:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND

cpe:2.3:o:siemens:scalance_xp216_\(eip\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp216_\(eip\):-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND

cpe:2.3:o:siemens:scalance_xp216eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp216eec:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND

cpe:2.3:o:siemens:scalance_xp216poe_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp216poe_eec:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND

cpe:2.3:o:siemens:scalance_xr-300_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND

cpe:2.3:o:siemens:scalance_xr-300eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300eec:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND

cpe:2.3:o:siemens:scalance_xr-300poe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300poe:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND

cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*

Configuration 66 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*

Configuration 67 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*

Configuration 68 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*

Configuration 69 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*

Configuration 70 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*

Configuration 71 (hide)

AND

cpe:2.3:o:siemens:scalance_xr324wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr324wg:-:*:*:*:*:*:*:*

Configuration 72 (hide)

AND

cpe:2.3:o:siemens:scalance_xr326-2c_poe_wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr326-2c_poe_wg:-:*:*:*:*:*:*:*

Configuration 73 (hide)

AND

cpe:2.3:o:siemens:scalance_xr328-4c_wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr328-4c_wg:-:*:*:*:*:*:*:*

Configuration 74 (hide)

AND

cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*

Configuration 75 (hide)

AND

cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr524:-:*:*:*:*:*:*:*

Configuration 76 (hide)

AND

cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*

Configuration 77 (hide)

AND

cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:*:*:*:*:*:*:*

Configuration 78 (hide)

AND

cpe:2.3:o:siemens:scalance_xr526_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr526:-:*:*:*:*:*:*:*

Configuration 79 (hide)

AND

cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*

Configuration 80 (hide)

AND

cpe:2.3:h:siemens:scalance_xr526-8c_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:*:*:*:*:*:*:*

Configuration 81 (hide)

AND

cpe:2.3:o:siemens:scalance_xr528_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528:-:*:*:*:*:*:*:*

Configuration 82 (hide)

AND

cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*

Configuration 83 (hide)

AND

cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528-6m_2hr2:-:*:*:*:*:*:*:*

Configuration 84 (hide)

AND

cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528-6m_2hr2_l3:-:*:*:*:*:*:*:*

Configuration 85 (hide)

AND

cpe:2.3:o:siemens:scalance_xr528-6m_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528-6m_l3:-:*:*:*:*:*:*:*

Configuration 86 (hide)

AND

cpe:2.3:o:siemens:scalance_xr552_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552:-:*:*:*:*:*:*:*

Configuration 87 (hide)

AND

cpe:2.3:o:siemens:scalance_xr552-12_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552-12:-:*:*:*:*:*:*:*

Configuration 88 (hide)

AND

cpe:2.3:o:siemens:scalance_xr552-12m_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:*

Configuration 89 (hide)

AND

cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552-12m_2hr2:-:*:*:*:*:*:*:*

Configuration 90 (hide)

AND

cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_l3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552-12m_2hr2_l3:-:*:*:*:*:*:*:*

History

27 Jun 2023, 19:43

Type	Values Removed	Values Added
CWE	~~CWE-74~~	NVD-CWE-Other
CVSS	v2 : ~~unknown~~ v3 : ~~7.2~~	v2 : unknown v3 : 9.1
Summary	~~Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.~~	Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

13 Sep 2022, 10:15

Type	Values Removed	Values Added
Summary	A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600 family (All versions < V2.3.1), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions). Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.	Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

17 Aug 2022, 14:46

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.2
References	~~(CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf -~~	(CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf - Patch, Vendor Advisory
CPE		cpe:2.3:h:siemens:scalance_xr-300wg:-:::::::* cpe:2.3:h:siemens:scalance_xm408-4c:-:::::::* cpe:2.3:o:siemens:scalance_xr500_firmware:::::::: cpe:2.3:h:siemens:scalance_sc-600:-:::::::* cpe:2.3:o:siemens:scalance_xc206-2sfp_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xc216-4c:-:::::::* cpe:2.3:o:siemens:scalance_xc-200_firmware:::::::: cpe:2.3:h:siemens:scalance_xr526-8c:-:::::::* cpe:2.3:o:siemens:scalance_xm400_firmware:::::::: cpe:2.3:o:siemens:scalance_xp208_firmware:::::::: cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:::::::* cpe:2.3:h:siemens:scalance_xc208g_eec:-:::::::* cpe:2.3:h:siemens:scalance_xm408-8c:-:::::::* cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:::::::: cpe:2.3:h:siemens:scalance_xr326-2c_poe_wg:-:::::::* cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:::::::: cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_firmware:::::::: cpe:2.3:o:siemens:scalance_sc646-2c_firmware:::::::: cpe:2.3:h:siemens:scalance_xp208eec:-:::::::* cpe:2.3:h:siemens:scalance_xr552-12m:-:::::::* cpe:2.3:h:siemens:scalance_xc224-4c_g_:-:::::::* cpe:2.3:h:siemens:scalance_xc206-2:-:::::::* cpe:2.3:o:siemens:scalance_xc216_firmware:::::::: cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:::::::: cpe:2.3:h:siemens:scalance_xr526:-:::::::* cpe:2.3:h:siemens:scalance_sc632-2c:-:::::::* cpe:2.3:h:siemens:scalance_xr500:-:::::::* cpe:2.3:h:siemens:scalance_xp208:-:::::::* cpe:2.3:h:siemens:scalance_xb-200:-:::::::* cpe:2.3:o:siemens:scalance_xr524_firmware:::::::: cpe:2.3:o:siemens:scalance_xr528-6m_firmware:::::::: cpe:2.3:o:siemens:scalance_xr324wg_firmware:::::::: cpe:2.3:h:siemens:scalance_xm400:-:::::::* cpe:2.3:h:siemens:scalance_xc208:-:::::::* cpe:2.3:h:siemens:scalance_xr552-12m_2hr2:-:::::::* cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:::::::* cpe:2.3:h:siemens:scalance_xb205-3ld:-:::::::* cpe:2.3:h:siemens:scalance_xp216poe_eec:-:::::::* cpe:2.3:o:siemens:scalance_xp216poe_eec_firmware:::::::: cpe:2.3:o:siemens:scalance_sc632-2c_firmware:::::::: cpe:2.3:h:siemens:scalance_xc208g:-:::::::* cpe:2.3:o:siemens:scalance_xc206-2_firmware:::::::: cpe:2.3:o:siemens:scalance_xc216-4c_g_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_s615:-:::::::* cpe:2.3:o:siemens:scalance_xm408-8c_firmware:::::::: cpe:2.3:o:siemens:scalance_xf-200ba_firmware:::::::: cpe:2.3:o:siemens:scalance_xp216eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xp216:-:::::::* cpe:2.3:o:siemens:scalance_xr528-6m_l3_firmware:::::::: cpe:2.3:h:siemens:scalance_xr328-4c_wg:-:::::::* cpe:2.3:h:siemens:scalance_xf-200ba:-:::::::* cpe:2.3:o:siemens:scalance_xp-200_firmware:::::::: cpe:2.3:o:siemens:scalance_xb213-3_firmware:::::::: cpe:2.3:h:siemens:scalance_xr528-6m_2hr2_l3:-:::::::* cpe:2.3:o:siemens:scalance_xc208g_\(e\/ip\)_firmware:::::::: cpe:2.3:h:siemens:scalance_xr524-8c_l3:-:::::::* cpe:2.3:o:siemens:scalance_xf204-2ba_dna_firmware:::::::: cpe:2.3:o:siemens:scalance_xc224-4c_g_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xc206-2sfp_eec:-:::::::* cpe:2.3:h:siemens:scalance_xf204-2ba_dna:-:::::::* cpe:2.3:h:siemens:scalance_xr528-6m_2hr2:-:::::::* cpe:2.3:h:siemens:scalance_xr-300poe:-:::::::* cpe:2.3:o:siemens:scalance_xc208g_poe_firmware:::::::: cpe:2.3:h:siemens:scalance_xr526-8c_l3_firmware:::::::: cpe:2.3:o:siemens:scalance_xr324-12m_firmware:::::::: cpe:2.3:o:siemens:scalance_xc224__firmware:::::::: cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_firmware:::::::: cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:::::::* cpe:2.3:o:siemens:scalance_xr-300poe_firmware:::::::: cpe:2.3:o:siemens:scalance_sc642-2c_firmware:::::::: cpe:2.3:h:siemens:scalance_w700_ieee_802.11ac:-:::::::* cpe:2.3:h:siemens:scalance_xb208:-:::::::* cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:::::::: cpe:2.3:h:siemens:scalance_xc216-4c_g_\(e\/ip\):-:::::::* cpe:2.3:o:siemens:scalance_xm408-4c_l3_firmware:::::::: cpe:2.3:h:siemens:scalance_xm408-8c_l3:-:::::::* cpe:2.3:o:siemens:scalance_xm408-8c_l3_firmware:::::::: cpe:2.3:o:siemens:scalance_xm408-4c_firmware:::::::: cpe:2.3:h:siemens:scalance_xc208g_poe:-:::::::* cpe:2.3:o:siemens:scalance_xr552_firmware:::::::: cpe:2.3:o:siemens:scalance_xc208_firmware:::::::: cpe:2.3:h:siemens:scalance_w700_ieee_802.11ax:-:::::::* cpe:2.3:o:siemens:scalance_xb205-3ld_firmware:::::::: cpe:2.3:o:siemens:scalance_xb205-3_firmware:::::::: cpe:2.3:o:siemens:scalance_s615_firmware:::::::: cpe:2.3:o:siemens:scalance_xc216-4c_g_firmware:::::::: cpe:2.3:h:siemens:scalance_xp208_\(eip\):-:::::::* cpe:2.3:o:siemens:scalance_xc206-2sfp_g_firmware:::::::: cpe:2.3:h:siemens:scalance_xr524:-:::::::* cpe:2.3:o:siemens:scalance_xc224-4c_g__firmware:::::::: cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:::::::: cpe:2.3:o:siemens:scalance_xc208g_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xc216eec:-:::::::* cpe:2.3:h:siemens:scalance_xc224_:-:::::::* cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:::::::* cpe:2.3:h:siemens:scalance_xr552:-:::::::* cpe:2.3:h:siemens:scalance_xr524-8c:-:::::::* cpe:2.3:h:siemens:scalance_xr528:-:::::::* cpe:2.3:h:siemens:scalance_xc206-2sfp_g_eec:-:::::::* cpe:2.3:o:siemens:scalance_xm416-4c_firmware:::::::: cpe:2.3:h:siemens:scalance_xp208poe_eec:-:::::::* cpe:2.3:o:siemens:scalance_xr328-4c_wg_firmware:::::::: cpe:2.3:h:siemens:scalance_xc208eec:-:::::::* cpe:2.3:o:siemens:scalance_xc206-2sfp_g_\(e\/ip\)_firmware:::::::: cpe:2.3:o:siemens:scalance_m-800_firmware:::::::: cpe:2.3:o:siemens:scalance_xr552-12m_firmware:::::::: cpe:2.3:h:siemens:scalance_xr528-6m_l3:-:::::::* cpe:2.3:h:siemens:scalance_xc216-4c_g_eec:-:::::::* cpe:2.3:h:siemens:scalance_xm408-4c_l3:-:::::::* cpe:2.3:o:siemens:scalance_xb213-3ld_firmware:::::::: cpe:2.3:o:siemens:scalance_xc216-4c_g_\(e\/ip\)_firmware:::::::: cpe:2.3:h:siemens:scalance_xm416-4c_l3:-:::::::* cpe:2.3:h:siemens:scalance_xc-200:-:::::::* cpe:2.3:o:siemens:scalance_xm416-4c_l3_firmware:::::::: cpe:2.3:o:siemens:scalance_xr-300wg_firmware:::::::: cpe:2.3:o:siemens:scalance_xb216_firmware:::::::: cpe:2.3:o:siemens:scalance_xr528-6m_2hr2_l3_firmware:::::::: cpe:2.3:h:siemens:scalance_xr526-8c_l3:-:::::::* cpe:2.3:o:siemens:scalance_xr528_firmware:::::::: cpe:2.3:o:siemens:scalance_xc216eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xm416-4c:-:::::::* cpe:2.3:o:siemens:scalance_xp208poe_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xr552-12m_2hr2_l3:-:::::::* cpe:2.3:o:siemens:scalance_xr526-8c_firmware:::::::: cpe:2.3:h:siemens:scalance_xc216:-:::::::* cpe:2.3:h:siemens:scalance_sc622-2c:-:::::::* cpe:2.3:o:siemens:scalance_xc224-4c_g_\(e\/ip\)_firmware:::::::: cpe:2.3:h:siemens:scalance_xc208g_\(e\/ip\):-:::::::* cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:::::::* cpe:2.3:h:siemens:scalance_xc206-2sfp_g_\(e\/ip\):-:::::::* cpe:2.3:h:siemens:scalance_xc216-4c_g:-:::::::* cpe:2.3:o:siemens:scalance_sc-600_firmware:::::::: cpe:2.3:h:siemens:scalance_sc642-2c:-:::::::* cpe:2.3:o:siemens:scalance_xc206-2g_poe__firmware:::::::: cpe:2.3:o:siemens:scalance_xr524-8c_firmware:::::::: cpe:2.3:o:siemens:scalance_w700_ieee_802.11ac_firmware:::::::: cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:::::::: cpe:2.3:o:siemens:scalance_xr526_firmware:::::::: cpe:2.3:h:siemens:scalance_xr324-12m:-:::::::* cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-:::::::* cpe:2.3:h:siemens:scalance_xc206-2sfp_g:-:::::::* cpe:2.3:h:siemens:scalance_sc646-2c:-:::::::* cpe:2.3:o:siemens:scalance_xr-300_firmware:::::::: cpe:2.3:o:siemens:scalance_w700_ieee_802.11ax_firmware:::::::: cpe:2.3:h:siemens:scalance_xr324wg:-:::::::* cpe:2.3:h:siemens:scalance_m-800:-:::::::* cpe:2.3:h:siemens:scalance_xr-300:-:::::::* cpe:2.3:o:siemens:scalance_xp208eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xr-300eec:-:::::::* cpe:2.3:h:siemens:scalance_xb205-3:-:::::::* cpe:2.3:o:siemens:scalance_xc216-4c_firmware:::::::: cpe:2.3:o:siemens:scalance_sc622-2c_firmware:::::::: cpe:2.3:h:siemens:scalance_xb213-3ld:-:::::::* cpe:2.3:o:siemens:scalance_xp208_\(eip\)_firmware:::::::: cpe:2.3:h:siemens:scalance_xb216:-:::::::* cpe:2.3:h:siemens:scalance_xp216eec:-:::::::* cpe:2.3:h:siemens:scalance_xr528-6m:-:::::::* cpe:2.3:o:siemens:scalance_xc206-2sfp_g_eec_firmware:::::::: cpe:2.3:o:siemens:scalance_xr524-8c_l3_firmware:::::::: cpe:2.3:h:siemens:scalance_sc636-2c:-:::::::* cpe:2.3:h:siemens:scalance_xp-200:-:::::::* cpe:2.3:h:siemens:scalance_xp216_\(eip\):-:::::::* cpe:2.3:o:siemens:scalance_xp216_firmware:::::::: cpe:2.3:o:siemens:scalance_xr552-12_firmware:::::::: cpe:2.3:o:siemens:scalance_xc208eec_firmware:::::::: cpe:2.3:o:siemens:scalance_xc208g_firmware:::::::: cpe:2.3:o:siemens:scalance_xb208_firmware:::::::: cpe:2.3:o:siemens:scalance_xr326-2c_poe_wg_firmware:::::::: cpe:2.3:h:siemens:scalance_xc206-2g_poe_:-:::::::* cpe:2.3:h:siemens:scalance_xb213-3:-:::::::* cpe:2.3:o:siemens:scalance_xr-300eec_firmware:::::::: cpe:2.3:o:siemens:scalance_sc636-2c_firmware:::::::: cpe:2.3:h:siemens:scalance_xr552-12:-:::::::* cpe:2.3:h:siemens:scalance_xc206-2g_poe_eec:-:::::::* cpe:2.3:o:siemens:scalance_xp216_\(eip\)_firmware:::::::: cpe:2.3:o:siemens:scalance_xb-200_firmware:::::::: cpe:2.3:o:siemens:scalance_xc206-2g_poe_eec_firmware:::::::: cpe:2.3:h:siemens:scalance_xc224-4c_g_\(e\/ip\):-:::::::* cpe:2.3:o:siemens:scalance_xr552-12m_2hr2_l3_firmware:::::::: cpe:2.3:h:siemens:scalance_xc224-4c_g_eec:-:::::::*

10 Aug 2022, 20:16

Type	Values Removed	Values Added
CWE		CWE-74
Summary	A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600 family (All versions < V2.3.1), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions). Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.	A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600 family (All versions < V2.3.1), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions). Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

10 Aug 2022, 13:14

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-08-10 12:15

Updated : 2024-02-04 22:51

NVD link : CVE-2022-36323

Mitre link : CVE-2022-36323

CVE.ORG link : CVE-2022-36323

JSON object : View

Products Affected

siemens

scalance_sc622-2c_firmware
scalance_xr324-4m_poe_ts
scalance_w700_ieee_802.11ac_firmware
scalance_xm400_firmware
scalance_xb213-3
scalance_xr524
scalance_xr526-8c
scalance_xr324wg_firmware
scalance_xr326-2c_poe_wg
scalance_xc208g_eec
scalance_xc206-2g_poe_eec_firmware
scalance_m-800
scalance_xb213-3ld_firmware
scalance_xr552-12m_2hr2_firmware
scalance_xm416-4c_firmware
scalance_xb205-3ld_firmware
scalance_xc224-4c_g_eec_firmware
scalance_s615_firmware
scalance_xc208
scalance_xr526
scalance_xr552
scalance_sc632-2c_firmware
scalance_xr528-6m_firmware
scalance_xp216poe_eec
scalance_xm416-4c_l3_firmware
scalance_xm408-8c_l3
scalance_xr324-4m_poe_firmware
scalance_xp208
scalance_xr552-12m_2hr2
scalance_xr-300eec
scalance_xr528-6m_2hr2
scalance_xr528-6m_l3
scalance_xr-300
scalance_xr526-8c_firmware
scalance_xb205-3ld
scalance_xb-200_firmware
scalance_sc636-2c_firmware
scalance_xr524-8c_firmware
scalance_xf204-2ba_irt_firmware
scalance_xm408-8c_l3_firmware
scalance_xb-200
scalance_xp208poe_eec_firmware
scalance_w700_ieee_802.11ac
scalance_sc646-2c
scalance_xc206-2_firmware
scalance_xp208eec
scalance_xr326-2c_poe_wg_firmware
scalance_xr324-12m
scalance_xf-200ba
scalance_xr552-12_firmware
scalance_xr528-6m_l3_firmware
scalance_xp216
scalance_xm400
scalance_xp216_firmware
scalance_xc208g_\(e\/ip\)
scalance_xf204-2ba_irt
scalance_xr324-4m_poe_ts_firmware
scalance_xc216-4c_g_eec_firmware
scalance_xp-200_firmware
scalance_xc216-4c_g_\(e\/ip\)_firmware
scalance_xc206-2
scalance_w700_ieee_802.11ax_firmware
scalance_xr552-12m
scalance_xc216_firmware
scalance_sc632-2c
scalance_sc-600_firmware
scalance_xc208g_poe_firmware
scalance_xc224-4c_g_
scalance_xr524-8c_l3
scalance_xc216-4c_g_firmware
scalance_xc224-4c_g__firmware
scalance_s615
scalance_xp208_\(eip\)
scalance_xp208poe_eec
scalance_xr-300eec_firmware
scalance_xp-200
scalance_xc216eec_firmware
scalance_xm408-4c_l3
scalance_xr526-8c_l3
scalance_xr526-8c_l3_firmware
scalance_xc216-4c_g_eec
scalance_xc216eec
scalance_sc642-2c
scalance_xr324wg
scalance_m-800_firmware
scalance_xp216_\(eip\)_firmware
scalance_xc208eec_firmware
scalance_xb205-3_firmware
scalance_xc216-4c_g_\(e\/ip\)
scalance_xp208eec_firmware
scalance_xm408-4c
scalance_w700_ieee_802.11ax
scalance_xc206-2sfp_g
scalance_xc208g_eec_firmware
scalance_xm408-4c_l3_firmware
scalance_xb208_firmware
scalance_xc206-2sfp_g_eec
scalance_xm408-4c_firmware
scalance_xr524-8c_l3_firmware
scalance_xr328-4c_wg
scalance_xr-300wg
scalance_xr528-6m_2hr2_firmware
scalance_xm416-4c_l3
scalance_xr-300wg_firmware
scalance_sc636-2c
scalance_xc208g
scalance_xc208eec
scalance_xc216-4c_firmware
scalance_xc208_firmware
scalance_xc206-2sfp_g_\(e\/ip\)_firmware
scalance_xc206-2sfp_g_\(e\/ip\)
scalance_xr-300poe
scalance_xr552-12m_firmware
scalance_xc206-2sfp_eec
scalance_xr324-4m_eec
scalance_xr324-12m_firmware
scalance_xr-300poe_firmware
scalance_xr500_firmware
scalance_xc224-4c_g_\(e\/ip\)
scalance_xr528-6m
scalance_xr552-12m_2hr2_l3_firmware
scalance_xc206-2g_poe_eec
scalance_sc-600
scalance_xc206-2sfp_g_eec_firmware
scalance_xc224__firmware
scalance_xc208g_firmware
scalance_xb213-3ld
scalance_sc622-2c
scalance_xf204-2ba_dna
scalance_xm408-8c_firmware
scalance_xr552_firmware
scalance_xc208g_poe
scalance_xc224-4c_g_eec
scalance_xc206-2sfp_g_firmware
scalance_xr324-12m_ts
scalance_xr324-4m_eec_firmware
scalance_xc216-4c
scalance_xc216
scalance_xp216eec_firmware
scalance_xc206-2g_poe__firmware
scalance_xr528-6m_2hr2_l3_firmware
scalance_xb216_firmware
scalance_sc642-2c_firmware
scalance_xc-200_firmware
scalance_xb213-3_firmware
scalance_xr526_firmware
scalance_xp208_firmware
scalance_xc206-2g_poe_
scalance_xm408-8c
scalance_xb205-3
scalance_xr500
scalance_xc208g_\(e\/ip\)_firmware
scalance_xc224_
scalance_xf204-2ba_dna_firmware
scalance_xr324-4m_poe
scalance_xr524_firmware
scalance_xb208
scalance_xr552-12m_2hr2_l3
scalance_xr328-4c_wg_firmware
scalance_xr-300_firmware
scalance_xc224-4c_g_\(e\/ip\)_firmware
scalance_xr528
scalance_sc646-2c_firmware
scalance_xr528-6m_2hr2_l3
scalance_xc216-4c_g
scalance_xc206-2sfp_eec_firmware
scalance_xp216eec
scalance_xr528_firmware
scalance_xr524-8c
scalance_xp208_\(eip\)_firmware
scalance_xc-200
scalance_xr324-12m_ts_firmware
scalance_xr552-12
scalance_w700_ieee_802.11n_firmware
scalance_xf-200ba_firmware
scalance_xm416-4c
scalance_xp216_\(eip\)
scalance_xp216poe_eec_firmware
scalance_w700_ieee_802.11n
scalance_xb216

CWE

NVD-CWE-Other CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

9.1 /10