CVE-2022-26334
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.
Se ha identificado una vulnerabilidad en SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, revestido), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, revestido), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, revestido), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, revestido), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, revestido), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, revestido), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, revestido), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, revestido), SCALANCE X307-3 SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, puertos en la parte frontal), SCALANCE XR324-12M (230V, puertos en la parte delantera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (230V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte delantera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M (24V, puertos en la parte trasera), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte delantera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M EEC (2x 24V, puertos en la parte trasera), SCALANCE XR324-4M PoE (230V, puertos en la parte delantera), SCALANCE XR324-4M PoE (230V, puertos en la parte trasera), SCALANCE XR324-4M PoE (24V, puertos en la parte delantera), SCALANCE XR324-4M PoE (24V, puertos en la parte trasera), SCALANCE XR324-4M PoE TS (24V, puertos en la parte delantera), SIPLUS NET SCALANCE X308-2. Los dispositivos afectados no comprueban correctamente el parámetro GET XNo de las peticiones HTTP entrantes. Esto podría permitir a un atacante remoto no autenticado bloquear los dispositivos afectados
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-03-01 CVE Reserved
- 2022-04-12 CVE Published
- 2023-11-03 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf | 2022-04-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Scalance X302-7eec Firmware Search vendor "Siemens" for product "Scalance X302-7eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X302-7eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X302-7eec Search vendor "Siemens" for product "Scalance X302-7eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X304-2fe Firmware Search vendor "Siemens" for product "Scalance X304-2fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X304-2fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X304-2fe Search vendor "Siemens" for product "Scalance X304-2fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X306-1ldfe Firmware Search vendor "Siemens" for product "Scalance X306-1ldfe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X306-1ldfe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X306-1ldfe Search vendor "Siemens" for product "Scalance X306-1ldfe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-2eec Firmware Search vendor "Siemens" for product "Scalance X307-2eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-2eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-2eec Search vendor "Siemens" for product "Scalance X307-2eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-3 Firmware Search vendor "Siemens" for product "Scalance X307-3 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-3 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-3 Search vendor "Siemens" for product "Scalance X307-3" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X307-3ld Firmware Search vendor "Siemens" for product "Scalance X307-3ld Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X307-3ld Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X307-3ld Search vendor "Siemens" for product "Scalance X307-3ld" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2 Firmware Search vendor "Siemens" for product "Scalance X308-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2 Search vendor "Siemens" for product "Scalance X308-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2ld Firmware Search vendor "Siemens" for product "Scalance X308-2ld Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2ld Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2ld Search vendor "Siemens" for product "Scalance X308-2ld" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2lh Firmware Search vendor "Siemens" for product "Scalance X308-2lh Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2lh Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2lh Search vendor "Siemens" for product "Scalance X308-2lh" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2lh\+ Firmware Search vendor "Siemens" for product "Scalance X308-2lh\+ Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2lh\+ Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2lh\+ Search vendor "Siemens" for product "Scalance X308-2lh\+" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Firmware Search vendor "Siemens" for product "Scalance X308-2m Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2m Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Search vendor "Siemens" for product "Scalance X308-2m" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Poe Firmware Search vendor "Siemens" for product "Scalance X308-2m Poe Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Poe Search vendor "Siemens" for product "Scalance X308-2m Poe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X308-2m Ts Firmware Search vendor "Siemens" for product "Scalance X308-2m Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X308-2m Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X308-2m Ts Search vendor "Siemens" for product "Scalance X308-2m Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X310 Firmware Search vendor "Siemens" for product "Scalance X310 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X310 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X310 Search vendor "Siemens" for product "Scalance X310" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X310fe Firmware Search vendor "Siemens" for product "Scalance X310fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X310fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X310fe Search vendor "Siemens" for product "Scalance X310fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X320-1fe Firmware Search vendor "Siemens" for product "Scalance X320-1fe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X320-1fe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X320-1fe Search vendor "Siemens" for product "Scalance X320-1fe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X320-1-2ldfe Firmware Search vendor "Siemens" for product "Scalance X320-1-2ldfe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X320-1-2ldfe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X320-1-2ldfe Search vendor "Siemens" for product "Scalance X320-1-2ldfe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance X408-2 Firmware Search vendor "Siemens" for product "Scalance X408-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance X408-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance X408-2 Search vendor "Siemens" for product "Scalance X408-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Eec Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Eec Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Eec Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Eec Search vendor "Siemens" for product "Scalance Xr324-4m Eec" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Poe Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Poe Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Search vendor "Siemens" for product "Scalance Xr324-4m Poe" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Ts Firmware Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-4m Poe Ts Search vendor "Siemens" for product "Scalance Xr324-4m Poe Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-12m Firmware Search vendor "Siemens" for product "Scalance Xr324-12m Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-12m Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-12m Search vendor "Siemens" for product "Scalance Xr324-12m" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Scalance Xr324-12m Ts Firmware Search vendor "Siemens" for product "Scalance Xr324-12m Ts Firmware" | < 4.1.4 Search vendor "Siemens" for product "Scalance Xr324-12m Ts Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance Xr324-12m Ts Search vendor "Siemens" for product "Scalance Xr324-12m Ts" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siplus Net Scalance X308-2 Firmware Search vendor "Siemens" for product "Siplus Net Scalance X308-2 Firmware" | < 4.1.4 Search vendor "Siemens" for product "Siplus Net Scalance X308-2 Firmware" and version " < 4.1.4" | - |
Affected
| in | Siemens Search vendor "Siemens" | Siplus Net Scalance X308-2 Search vendor "Siemens" for product "Siplus Net Scalance X308-2" | - | - |
Safe
|