CVEvulnerability

CVE-2022-36323

9.1 CRITICAL Published 2022-08-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-74

Description

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected configurations

• siemens scalance m-800 firmware • siemens scalance s615 firmware • siemens scalance sc-600 firmware (< 2.3.1) • siemens scalance sc622-2c firmware (< 2.3.1) • siemens scalance sc632-2c firmware (< 2.3.1) • siemens scalance sc636-2c firmware (< 2.3.1) • siemens scalance sc642-2c firmware (< 2.3.1) • siemens scalance sc646-2c firmware (< 2.3.1) • siemens scalance w700 ieee 802.11ax firmware • siemens scalance w700 ieee 802.11n firmware • siemens scalance w700 ieee 802.11ac firmware • siemens scalance xb-200 firmware • siemens scalance xb205-3 firmware • siemens scalance xb205-3ld firmware • siemens scalance xb208 firmware • siemens scalance xb213-3 firmware • siemens scalance xb213-3ld firmware • siemens scalance xb216 firmware • siemens scalance xc-200 firmware • siemens scalance xc206-2 firmware • siemens scalance xc206-2g poe firmware • siemens scalance xc206-2g poe eec firmware • siemens scalance xc206-2sfp eec firmware • siemens scalance xc206-2sfp g firmware • siemens scalance xc206-2sfp g \(e\/ip\) firmware • siemens scalance xc206-2sfp g eec firmware • siemens scalance xc208 firmware • siemens scalance xc208eec firmware • siemens scalance xc208g firmware • siemens scalance xc208g \(e\/ip\) firmware • siemens scalance xc208g eec firmware • siemens scalance xc208g poe firmware • siemens scalance xc216 firmware • siemens scalance xc216-4c firmware • siemens scalance xc216-4c g firmware • siemens scalance xc216-4c g \(e\/ip\) firmware • siemens scalance xc216-4c g eec firmware • siemens scalance xc216eec firmware • siemens scalance xc224 firmware • siemens scalance xc224-4c g firmware • siemens scalance xc224-4c g \(e\/ip\) firmware • siemens scalance xc224-4c g eec firmware • siemens scalance xf-200ba firmware • siemens scalance xf204-2ba dna firmware • siemens scalance xf204-2ba irt firmware • siemens scalance xm400 firmware • siemens scalance xm408-4c firmware • siemens scalance xm408-4c l3 firmware • siemens scalance xm408-8c firmware • siemens scalance xm408-8c l3 firmware • siemens scalance xm416-4c firmware • siemens scalance xm416-4c l3 firmware • siemens scalance xp-200 firmware • siemens scalance xp208 firmware • siemens scalance xp208 \(eip\) firmware • siemens scalance xp208eec firmware • siemens scalance xp208poe eec firmware • siemens scalance xp216 firmware • siemens scalance xp216 \(eip\) firmware • siemens scalance xp216eec firmware … and 30 more

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References