CVEvulnerability

CVE-2022-36325

4.8 MEDIUM Published 2022-08-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-80

Description

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Affected configurations

• siemens scalance m-800 firmware • siemens scalance s615 firmware • siemens scalance sc-600 firmware (< 2.3.1) • siemens scalance sc622-2c firmware (< 2.3.1) • siemens scalance sc632-2c firmware (< 2.3.1) • siemens scalance sc636-2c firmware (< 2.3.1) • siemens scalance sc642-2c firmware (< 2.3.1) • siemens scalance sc646-2c firmware (< 2.3.1) • siemens scalance w700 ieee 802.11ax firmware • siemens scalance w700 ieee 802.11n firmware • siemens scalance w700 ieee 802.11ac firmware • siemens scalance xb-200 firmware • siemens scalance xb205-3 firmware • siemens scalance xb205-3ld firmware • siemens scalance xb208 firmware • siemens scalance xb213-3 firmware • siemens scalance xb213-3ld firmware • siemens scalance xb216 firmware • siemens scalance xc-200 firmware • siemens scalance xc206-2 firmware • siemens scalance xc206-2g poe firmware • siemens scalance xc206-2g poe eec firmware • siemens scalance xc206-2sfp eec firmware • siemens scalance xc206-2sfp g firmware • siemens scalance xc206-2sfp g \(e\/ip\) firmware • siemens scalance xc206-2sfp g eec firmware • siemens scalance xc208 firmware • siemens scalance xc208eec firmware • siemens scalance xc208g firmware • siemens scalance xc208g \(e\/ip\) firmware • siemens scalance xc208g eec firmware • siemens scalance xc208g poe firmware • siemens scalance xc216 firmware • siemens scalance xc216-4c firmware • siemens scalance xc216-4c g firmware • siemens scalance xc216-4c g \(e\/ip\) firmware • siemens scalance xc216-4c g eec firmware • siemens scalance xc216eec firmware • siemens scalance xc224 firmware • siemens scalance xc224-4c g firmware • siemens scalance xc224-4c g \(e\/ip\) firmware • siemens scalance xc224-4c g eec firmware • siemens scalance xf-200ba firmware • siemens scalance xf204-2ba dna firmware • siemens scalance xf204-2ba irt firmware • siemens scalance xm400 firmware • siemens scalance xm408-4c firmware • siemens scalance xm408-4c l3 firmware • siemens scalance xm408-8c firmware • siemens scalance xm408-8c l3 firmware • siemens scalance xm416-4c firmware • siemens scalance xm416-4c l3 firmware • siemens scalance xp-200 firmware • siemens scalance xp208 firmware • siemens scalance xp208 \(eip\) firmware • siemens scalance xp208eec firmware • siemens scalance xp208poe eec firmware • siemens scalance xp216 firmware • siemens scalance xp216 \(eip\) firmware • siemens scalance xp216eec firmware … and 30 more

Related

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References