7.8

CVE-2022-26335

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance X302-7eec Firmware Version < 4.1.4
   Siemens ≫ Scalance X302-7eec Version -
Siemens ≫ Scalance X304-2fe Firmware Version < 4.1.4
   Siemens ≫ Scalance X304-2fe Version -
Siemens ≫ Scalance X306-1ldfe Firmware Version < 4.1.4
   Siemens ≫ Scalance X306-1ldfe Version -
Siemens ≫ Scalance X307-2eec Firmware Version < 4.1.4
   Siemens ≫ Scalance X307-2eec Version -
Siemens ≫ Scalance X307-3 Firmware Version < 4.1.4
   Siemens ≫ Scalance X307-3 Version -
Siemens ≫ Scalance X307-3ld Firmware Version < 4.1.4
   Siemens ≫ Scalance X307-3ld Version -
Siemens ≫ Scalance X308-2 Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2 Version -
Siemens ≫ Scalance X308-2ld Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2ld Version -
Siemens ≫ Scalance X308-2lh Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2lh Version -
Siemens ≫ Scalance X308-2lh+ Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2lh+ Version -
Siemens ≫ Scalance X308-2m Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2m Version -
Siemens ≫ Scalance X308-2m Ts Firmware Version < 4.1.4
   Siemens ≫ Scalance X308-2m Ts Version -
Siemens ≫ Scalance X310 Firmware Version < 4.1.4
   Siemens ≫ Scalance X310 Version -
Siemens ≫ Scalance X310fe Firmware Version < 4.1.4
   Siemens ≫ Scalance X310fe Version -
Siemens ≫ Scalance X320-1fe Firmware Version < 4.1.4
   Siemens ≫ Scalance X320-1fe Version -
Siemens ≫ Scalance X320-1-2ldfe Firmware Version < 4.1.4
   Siemens ≫ Scalance X320-1-2ldfe Version -
Siemens ≫ Scalance X408-2 Firmware Version < 4.1.4
   Siemens ≫ Scalance X408-2 Version -
Siemens ≫ Scalance Xr324-4m Eec Firmware Version < 4.1.4
   Siemens ≫ Scalance Xr324-4m Eec Version -
Siemens ≫ Scalance Xr324-4m Poe Firmware Version < 4.1.4
   Siemens ≫ Scalance Xr324-4m Poe Version -
Siemens ≫ Scalance Xr324-12m Firmware Version < 4.1.4
   Siemens ≫ Scalance Xr324-12m Version -
Siemens ≫ Scalance Xr324-12m Ts Firmware Version < 4.1.4
   Siemens ≫ Scalance Xr324-12m Ts Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.36% 0.692
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf
Patch
Vendor Advisory
Mitigation