CVEvulnerability
CVE-2022-36324
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
Description
Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
Affected configurations
• siemens scalance m-800 firmware
• siemens scalance s615 firmware
• siemens scalance w700 ieee 802.11ax firmware
• siemens scalance w700 ieee 802.11n firmware
• siemens scalance w700 ieee 802.11ac firmware
• siemens scalance xb-200 firmware
• siemens scalance xb205-3 firmware
• siemens scalance xb205-3ld firmware
• siemens scalance xb208 firmware
• siemens scalance xb213-3 firmware
• siemens scalance xb213-3ld firmware
• siemens scalance xb216 firmware
• siemens scalance xc-200 firmware
• siemens scalance xc206-2 firmware
• siemens scalance xc206-2g poe firmware
• siemens scalance xc206-2g poe eec firmware
• siemens scalance xc206-2sfp eec firmware
• siemens scalance xc206-2sfp g firmware
• siemens scalance xc206-2sfp g \(e\/ip\) firmware
• siemens scalance xc206-2sfp g eec firmware
• siemens scalance xc208 firmware
• siemens scalance xc208eec firmware
• siemens scalance xc208g firmware
• siemens scalance xc208g \(e\/ip\) firmware
• siemens scalance xc208g eec firmware
• siemens scalance xc208g poe firmware
• siemens scalance xc216 firmware
• siemens scalance xc216-4c firmware
• siemens scalance xc216-4c g firmware
• siemens scalance xc216-4c g \(e\/ip\) firmware
• siemens scalance xc216-4c g eec firmware
• siemens scalance xc216eec firmware
• siemens scalance xc224 firmware
• siemens scalance xc224-4c g firmware
• siemens scalance xc224-4c g \(e\/ip\) firmware
• siemens scalance xc224-4c g eec firmware
• siemens scalance xf-200ba firmware
• siemens scalance xf204-2ba dna firmware
• siemens scalance xf204-2ba irt firmware
• siemens scalance xm400 firmware
• siemens scalance xm408-4c firmware
• siemens scalance xm408-4c l3 firmware
• siemens scalance xm408-8c firmware
• siemens scalance xm408-8c l3 firmware
• siemens scalance xm416-4c firmware
• siemens scalance xm416-4c l3 firmware
• siemens scalance xp-200 firmware
• siemens scalance xp208 firmware
• siemens scalance xp208 \(eip\) firmware
• siemens scalance xp208eec firmware
• siemens scalance xp208poe eec firmware
• siemens scalance xp216 firmware
• siemens scalance xp216 \(eip\) firmware
• siemens scalance xp216eec firmware
• siemens scalance xp216poe eec firmware
• siemens scalance xr-300 firmware
• siemens scalance xr-300eec firmware
• siemens scalance xr-300poe firmware
• siemens scalance xr-300wg firmware
• siemens scalance xr324-12m firmware
… and 24 more
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-710008.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf Mitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf Mitigation, Vendor Advisory