CVEvulnerability

CVE-2022-31765

8.8 HIGH Published 2022-10-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862

Description

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Affected configurations

• siemens 6gk6108-4am00-2ba2 firmware (< 7.1.2) • siemens 6gk6108-4am00-2da2 firmware (< 7.1.2) • siemens 6gk5804-0ap00-2aa2 firmware (< 7.1.2) • siemens 6gk5812-1aa00-2aa2 firmware (< 7.1.2) • siemens 6gk5812-1ba00-2aa2 firmware (< 7.1.2) • siemens 6gk5816-1aa00-2aa2 firmware (< 7.1.2) • siemens 6gk5816-1ba00-2aa2 firmware (< 7.1.2) • siemens 6gk5826-2ab00-2ab2 firmware (< 7.1.2) • siemens 6gk5874-2aa00-2aa2 firmware (< 7.1.2) • siemens 6gk5874-3aa00-2aa2 firmware (< 7.1.2) • siemens 6gk5876-3aa02-2ba2 firmware (< 7.1.2) • siemens 6gk5876-3aa02-2ea2 firmware (< 7.1.2) • siemens 6gk5876-4aa00-2ba2 firmware (< 7.1.2) • siemens 6gk5876-4aa00-2da2 firmware (< 7.1.2) • siemens 6gk5853-2ea00-2da1 firmware (< 7.1.2) • siemens 6gk5856-2ea00-3da1 firmware (< 7.1.2) • siemens 6gk5856-2ea00-3aa1 firmware (< 7.1.2) • siemens 6gk5622-2gs00-2ac2 firmware • siemens 6gk5632-2gs00-2ac2 firmware • siemens 6gk5636-2gs00-2ac2 firmware • siemens 6gk5642-2gs00-2ac2 firmware • siemens 6gk5646-2gs00-2ac2 firmware • siemens 6gk5721-1fc00-0aa0 firmware • siemens 6gk5721-1fc00-0ab0 firmware • siemens 6gk5722-1fc00-0aa0 firmware • siemens 6gk5722-1fc00-0ab0 firmware • siemens 6gk5722-1fc00-0ac0 firmware • siemens 6gk5734-1fx00-0aa0 firmware • siemens 6gk5734-1fx00-0aa6 firmware • siemens 6gk5734-1fx00-0ab0 firmware • siemens 6gk5734-1fx00-0ab6 firmware • siemens 6gk5738-1gy00-0aa0 firmware • siemens 6gk5738-1gy00-0ab0 firmware • siemens 6gk5748-1gd00-0aa0 firmware • siemens 6gk5748-1gd00-0ab0 firmware • siemens 6gk5748-1fc00-0aa0 firmware • siemens 6gk5748-1fc00-0ab0 firmware • siemens 6gk5761-1fc00-0aa0 firmware • siemens 6gk5761-1fc00-0ab0 firmware • siemens 6gk5774-1fy00-0ta0 firmware • siemens 6gk5774-1fy00-0tb0 firmware • siemens 6gk5774-1fx00-0aa0 firmware • siemens 6gk5774-1fx00-0aa6 firmware • siemens 6gk5774-1fx00-0ab0 firmware • siemens 6gk5774-1fx00-0ac0 firmware • siemens 6gk5774-1fx00-0ab6 firmware • siemens 6gk5778-1gy00-0aa0 firmware • siemens 6gk5778-1gy00-0ab0 firmware • siemens 6gk5778-1gy00-0ta0 firmware • siemens 6gk5778-1gy00-0tb0 firmware • siemens 6gk5786-1fc00-0aa0 firmware • siemens 6gk5786-1fc00-0ab0 firmware • siemens 6gk5786-2fc00-0aa0 firmware • siemens 6gk5786-2fc00-0ab0 firmware • siemens 6gk5786-2fc00-0ac0 firmware • siemens 6gk5786-2fe00-0aa0 firmware • siemens 6gk5786-2fe00-0ab0 firmware • siemens 6gk5786-2hc00-0aa0 firmware • siemens 6gk5786-2hc00-0ab0 firmware • siemens 6gk5788-1gd00-0aa0 firmware … and 126 more

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References