CVE-2022-25752
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
Se ha identificado una vulnerabilidad en SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, revestido), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, revestido), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, revestido), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, revestido), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, revestido), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, revestido), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, revestido), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, revestido), SCALANCE X307-3 SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, puertos en la parte frontal), SCALANCE XR324-12M (230V, puertos en la parte delantera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M PoE (230V, puertos en la parte delantera), SCALANCE XR324-4M PoE (230V, puertos en la parte trasera), SCALANCE XR324-4M PoE (24V, puertos en la parte delantera), SCALANCE XR324-4M PoE (24V, puertos en la parte trasera), SCALANCE XR324-4M PoE TS (24V, puertos en la parte delantera), SIPLUS NET SCALANCE X308-2. El servidor web de los dispositivos afectados calcula los identificadores de sesión y los nonces de forma no segura. Esto podría permitir a un atacante remoto no autenticado forzar los identificadores de sesión y secuestrar las sesiones existentes
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-02-22 CVE Reserved
- 2022-04-12 CVE Published
- 2024-07-04 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-330: Use of Insufficiently Random Values
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf | 2022-04-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Scalance X302-7eec Firmware Search vendor "Siemens" for product "Scalance X302-7eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X302-7eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X302-7eec Search vendor "Siemens" for product "Scalance X302-7eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X304-2fe Firmware Search vendor "Siemens" for product "Scalance X304-2fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X304-2fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X304-2fe Search vendor "Siemens" for product "Scalance X304-2fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X306-1ldfe Firmware Search vendor "Siemens" for product "Scalance X306-1ldfe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X306-1ldfe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X306-1ldfe Search vendor "Siemens" for product "Scalance X306-1ldfe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-2eec Firmware Search vendor "Siemens" for product "Scalance X307-2eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-2eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-2eec Search vendor "Siemens" for product "Scalance X307-2eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-3 Firmware Search vendor "Siemens" for product "Scalance X307-3 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-3 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-3 Search vendor "Siemens" for product "Scalance X307-3" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-3ld Firmware Search vendor "Siemens" for product "Scalance X307-3ld Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-3ld Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-3ld Search vendor "Siemens" for product "Scalance X307-3ld" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2 Firmware Search vendor "Siemens" for product "Scalance X308-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2 Search vendor "Siemens" for product "Scalance X308-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2ld Firmware Search vendor "Siemens" for product "Scalance X308-2ld Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2ld Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2ld Search vendor "Siemens" for product "Scalance X308-2ld" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2lh Firmware Search vendor "Siemens" for product "Scalance X308-2lh Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2lh Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2lh Search vendor "Siemens" for product "Scalance X308-2lh" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2lh\+ Firmware Search vendor "Siemens" for product "Scalance X308-2lh\+ Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2lh\+ Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2lh\+ Search vendor "Siemens" for product "Scalance X308-2lh\+" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Firmware Search vendor "Siemens" for product "Scalance X308-2m Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2m Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Search vendor "Siemens" for product "Scalance X308-2m" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Poe Firmware Search vendor "Siemens" for product "Scalance X308-2m Poe Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Poe Search vendor "Siemens" for product "Scalance X308-2m Poe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Ts Firmware Search vendor "Siemens" for product "Scalance X308-2m Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2m Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Ts Search vendor "Siemens" for product "Scalance X308-2m Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X310 Firmware Search vendor "Siemens" for product "Scalance X310 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X310 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X310 Search vendor "Siemens" for product "Scalance X310" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X310fe Firmware Search vendor "Siemens" for product "Scalance X310fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X310fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X310fe Search vendor "Siemens" for product "Scalance X310fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X320-1fe Firmware Search vendor "Siemens" for product "Scalance X320-1fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X320-1fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X320-1fe Search vendor "Siemens" for product "Scalance X320-1fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X320-1-2ldfe Firmware Search vendor "Siemens" for product "Scalance X320-1-2ldfe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X320-1-2ldfe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X320-1-2ldfe Search vendor "Siemens" for product "Scalance X320-1-2ldfe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X408-2 Firmware Search vendor "Siemens" for product "Scalance X408-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X408-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X408-2 Search vendor "Siemens" for product "Scalance X408-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Eec Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Eec Search vendor "Siemens" for product "Scalance Xr324-4m Eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Poe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Poe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Search vendor "Siemens" for product "Scalance Xr324-4m Poe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Ts Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Ts Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-12m Firmware Search vendor "Siemens" for product "Scalance Xr324-12m Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-12m Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-12m Search vendor "Siemens" for product "Scalance Xr324-12m" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-12m Ts Firmware Search vendor "Siemens" for product "Scalance Xr324-12m Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-12m Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-12m Ts Search vendor "Siemens" for product "Scalance Xr324-12m Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siplus Net Scalance X308-2 Firmware Search vendor "Siemens" for product "Siplus Net Scalance X308-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Siplus Net Scalance X308-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Siplus Net Scalance X308-2 Search vendor "Siemens" for product "Siplus Net Scalance X308-2" | - | - |
Safe
|