Search

Find a vulnerability

Search criteria

    46 vulnerabilities found for SCALANCE X308-2LH by Siemens

    CVE-2025-40833 (GCVE-0-2025-40833)

    Vulnerability from nvd – Published: 2026-05-12 08:20 – Updated: 2026-08-11 12:20
    VLAI
    Summary
    The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-12 13:30 UTC
    CWE
    • CWE-476 - NULL Pointer Dereference
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens IE/PB LINK HA Affected: 0 , < V4.1.2 (custom)
    		Create a notification for this product.
    Siemens IE/PB link PN IO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1748-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 EEC M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2IA M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W721-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W722-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W738-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W761-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 SFP Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2IA RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2FM Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208PRO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X216 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X224 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 RD (inkl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF206-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF208 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC CFU DIQ Affected: 0 , < V2.0.0 (custom)
    		Create a notification for this product.
    Siemens SIMATIC CFU PA Affected: 0 , < V2.0.0 (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1510SP-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1512SP-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP HA IM155-6 PN Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1511-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1511F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1513-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1515-2 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1515F-2 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 314C-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315T-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317T-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 319-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 319F-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 412-2 PN V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) Affected: 0 , < V10.2 (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SIMIT UNIT V10 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMIT UNIT V11 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS CBE20 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G115D Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120 (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120D Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120X Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120XA Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G130 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G150 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S110 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S120 (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S150 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINUMERIK 840D sl Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET IE/PB link PN IO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 314C-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 315-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 315F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 317-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 317F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 1AC 20 A/4x5 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 20 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 20 A/4x5 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A/4x10 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A/4x10A EIP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 10 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 20 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 40 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 EX 20 A Ethernet PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40833",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-12T13:30:35.282908Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T13:31:06.530Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IE/PB LINK HA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "IE/PB link PN IO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) EU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M804PB",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M826-2 SHDSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-3 3G-Router (CN)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3 (ROK)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (NAM)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUB852-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUB852-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (CN)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (RoW)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 EEC LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC622-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC626-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC632-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC636-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC642-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC646-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2 EEC M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2IA M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W721-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W721-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W738-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W738-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W761-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W761-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12 EEC (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 SFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 SFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2IA RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2IA RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAB762-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUB762-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUB762-1 iFeatures",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2FM",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X216",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X224",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2 RD (inkl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF208",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-4C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-4C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-8C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-8C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM416-4C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM416-4C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 1x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 1x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 24V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 24V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 2x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 2x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 1x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 1x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 24V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 24V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 2x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 2x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (2HR2, L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2, L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU DIQ",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU PA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU PA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8FX PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200S IM 151-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200S IM 151-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP HA IM155-6 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 314C-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317TF-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 319-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 319F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 412-2 PN V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 414-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 414F-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 416-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 416F-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMIT UNIT V10",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMIT UNIT V11",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS CBE20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G115D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120XA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G130",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G150",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S110",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S120 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S150",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINUMERIK 840D sl",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200S IM 151-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200S IM 151-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET IE/PB link PN IO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 314C-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 315-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 315F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 317-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 317F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-400 CPU 414-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-400 CPU 416-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 1AC 20 A/4x5 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 20 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 20 A/4x5 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A/4x10 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A/4x10A EIP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 10 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 20 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 40 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 EX 20 A Ethernet PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T12:20:12.548Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-392349.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2025-40833",
    "datePublished": "2026-05-12T08:20:46.879Z",
    "dateReserved": "2025-04-16T08:50:26.976Z",
    "dateUpdated": "2026-08-11T12:20:12.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-15467 (GCVE-0-2025-15467)

    Vulnerability from nvd – Published: 2026-01-27 16:01 – Updated: 2026-08-14 12:04
    VLAI
    Title
    Stack buffer overflow in CMS (Auth)EnvelopedData parsing
    Summary
    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.8 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-03-19 00:00 UTC
    CWE
    • CWE-787 - Out-of-bounds Write
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    URL Tags
    https://openssl-library.org/news/secadv/20260127.txt vendor-advisory
    https://github.com/openssl/openssl/commit/2c8f0e5… patch
    https://github.com/openssl/openssl/commit/d0071a0… patch
    https://github.com/openssl/openssl/commit/6ced0fe… patch
    https://github.com/openssl/openssl/commit/5f26d42… patch
    https://github.com/openssl/openssl/commit/ce39170… patch
    http://www.openwall.com/lists/oss-security/2026/0…
    http://www.openwall.com/lists/oss-security/2026/02/25/6
    https://github.com/guiimoraes/CVE-2025-15467 exploit
    https://cert-portal.siemens.com/productcert/html/…
    https://cert-portal.siemens.com/productcert/html/…
    https://access.redhat.com/security/cve/CVE-2025-15467 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2430376 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:3415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2974 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:4419 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2659 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2671 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2072 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2633 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2077 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:6481 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1496 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1472 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1733 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1594 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1519 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1503 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3228 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3461 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3462 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1736 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:7261 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2485 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2995 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2844 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:4943 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2563 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    OpenSSL OpenSSL Affected: 3.6.0 , < 3.6.1 (semver)
    Affected: 3.5.0 , < 3.5.5 (semver)
    Affected: 3.4.0 , < 3.4.4 (semver)
    Affected: 3.3.0 , < 3.3.6 (semver)
    Affected: 3.0.0 , < 3.0.19 (semver)
    		Create a notification for this product.
    Siemens AI Lightweight Inference Server Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Connector for Azure Affected: 0 , < V1.8.0 (custom)
    		Create a notification for this product.
    Siemens Databus Affected: 0 , < V3.3.2 (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V9 Affected: 0 , < V9.0 QU1 (custom)
    		Create a notification for this product.
    Siemens HiMed Cockpit Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000RE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1400 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1500 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1501 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1510 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1511 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1512 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1524 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1536 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX5000 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9403 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9413 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9433 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router family Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router family Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X200-4P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X201-3P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X201-3P IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2P IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2FM Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA (HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA (PRP) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (PRP) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (PRP/HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X216 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X224 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC316-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC332 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC416-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC424-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC432 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF201-3P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF206-1 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF208 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR302-32 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR322-12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR502-32 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR522-12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8WG Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Shopfloor IT Suite Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIDIS Prime Affected: V4.0.700 , < * (custom)
    		Create a notification for this product.
    Siemens Siemens OPC UA Modelling Editor (SiOME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC eaSie Core Package Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC eaSie PCS 7 Skill Package Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Basic Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Comfort Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Mobile Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Industrial Thin Client Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IoT2050 Advanced Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC BX-21A Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC MD-57A Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC ORCLA Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Logon V1.6 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Logon V2.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV530 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV530 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 H CRANES Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV550 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV550 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV560 U Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV560 X Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC PCS neo V6.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC PDM V9.3 Affected: 0 , < V9.3 SP2 (custom)
    		Create a notification for this product.
    Siemens SIMATIC RTLS Locating Manager Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC STEP 7 V5 Affected: 0 , < V5.7 SP4 (custom)
    		Create a notification for this product.
    Siemens SIMATIC Target Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.19 Affected: 0 , < V3.19 P024 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.20 Affected: 0 , < V3.20 P012 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.21 Affected: 0 , < V3.21 P02 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC Runtime Advanced V17 Affected: 0 , < V17 Update 9 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC Unified Sequence Affected: 0 , < V21 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V7.5 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V8.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V8.1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMOTION OACAMGEN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.1 Affected: 0 , < V3.1.13 (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.2 Affected: 0 , < V3.2.4 (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.3 Affected: 0 , < V3.3.2 (custom)
    		Create a notification for this product.
    Siemens SINAMICS G200 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G220 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S200 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S210 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S220 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINEC INS Affected: 0 , < V1.0 SP2 Update 5 (custom)
    		Create a notification for this product.
    Siemens SINEC NMS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINEC Security Monitor Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINUMERIK Access MyMachine /OPC UA Affected: 0 , < V4.2 SP3 (custom)
    		Create a notification for this product.
    Siemens SIPLANT Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITRANS ASM IQ Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens User Management Component (UMC) Affected: 0 , < V2.15.3.0 (custom)
    		Create a notification for this product.
    Siemens Visual Inspection Cockpit Affected: 0 , < * (custom)
    		Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 1:3.5.1-7.el10_1 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.1
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 1:3.2.2-16.el10_0.6 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 1:3.5.1-7.el9_7 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
        cpe:/o:redhat:enterprise_linux:9
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Unaffected: 1:3.0.1-46.el9_0.7 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.0
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 1:3.0.7-18.el9_2.3 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 1:3.0.7-29.el9_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 1:3.2.2-7.el9_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    		 Create a notification for this product.
    Red Hat Red Hat JBoss Core Services 2.4.62.SP3     cpe:/a:redhat:jboss_core_services:1
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.13 Unaffected: 413.92.202602240113-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.13::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.14 Unaffected: 414.92.202602171627-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.14::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.15 Unaffected: 415.92.202603101737-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.15::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 416.94.202602101357-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.17 Unaffected: 417.94.202602090846-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.17::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 418.94.202602022246-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 4.19.9.6.202602112047-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 4.20.9.6.202602050328-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    		 Create a notification for this product.
    Red Hat Service Interconnect 1 for RHEL 9 Unaffected: 1.8.8-1 , < * (rpm)
        cpe:/a:redhat:service_interconnect:1::el9
    		 Create a notification for this product.
    Red Hat Service Interconnect 1 for RHEL 9 Unaffected: 2.7.6-5 , < * (rpm)
        cpe:/a:redhat:service_interconnect:1::el9
    		 Create a notification for this product.
    Red Hat Cost Management 4 Unaffected: 1770836349 , < * (rpm)
        cpe:/a:redhat:cost_management:4::el9
    		 Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1772160593 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    		 Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1772160625 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1769104765 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1769111774 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 3.5.6-0.1.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    		 Create a notification for this product.
    Red Hat Red Hat Insights proxy 1.5 Unaffected: 1770740405 , < * (rpm)
        cpe:/a:redhat:insights_proxy:1.5::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494649 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404535 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770764461 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494431 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404517 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770759517 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404430 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770851052 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770918006 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494726 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1770646925 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773670073 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773672059 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773670137 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    		 Create a notification for this product.
    Date Public
    2026-01-27 14:00
    Credits
    Stanislav Fort (Aisle Research) Igor Ustinov
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-25T21:10:03.795Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/01/27/10"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/02/25/6"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-15467",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-19T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-20T03:55:41.609Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/guiimoraes/CVE-2025-15467"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "AI Lightweight Inference Server",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Connector for Azure",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.8.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Databus",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V7",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V9",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.0 QU1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "HiMed Cockpit",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) EU",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000RE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1500",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1501",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1510",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1511",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1524",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1536",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9403",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9413",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9433",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M804PB",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M826-2 SHDSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3 3G-Router (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3 (ROK)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (NAM)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUB852-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUB852-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (RoW)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 EEC LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC622-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC626-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC632-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC636-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC642-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC646-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1 iFeatures",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X200-4P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X200-4P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2FM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2LD TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA (HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA (PRP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (PRP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (PRP/HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X206-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X206-1LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X208PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X212-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X212-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X224",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X304-2FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X306-1LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1 FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1-2LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X408-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC316-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC416-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC424-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC432",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF206-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Shopfloor IT Suite",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIDIS Prime",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V4.0.700",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Siemens OPC UA Modelling Editor (SiOME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC eaSie Core Package",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC eaSie PCS 7 Skill Package",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Basic Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Comfort Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Mobile Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Industrial Thin Client",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IoT2050 Advanced",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC BX-21A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC MD-57A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC ORCLA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Logon V1.6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Logon V2.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV530 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV530 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 H CRANES",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV550 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV550 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV560 U",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV560 X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC PCS neo V6.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC PDM V9.3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.3 SP2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC STEP 7 V5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.7 SP4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Target",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.19",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.19 P024",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.20",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.20 P012",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.21",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.21 P02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Runtime Advanced V17",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V17 Update 9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Unified Sequence",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V7.5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V8.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V8.1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOTION OACAMGEN",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2.4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS G200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS G220",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S210",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S220",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC INS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0 SP2 Update 5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC NMS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC Security Monitor",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINUMERIK Access MyMachine /OPC UA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.2 SP3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLANT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SITRANS ASM IQ",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "User Management Component (UMC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.15.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Visual Inspection Cockpit",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T12:22:38.618Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-434797.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-734552.html"
          }
        ],
        "x_adpType": "supplier"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.5.1-7.el10_1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.2.2-16.el10_0.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9",
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.5.1-7.el9_7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.1-46.el9_0.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.7-18.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.7-29.el9_4.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.2.2-7.el9_6.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_core_services:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat JBoss Core Services 2.4.62.SP3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "413.92.202602240113-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "414.92.202602171627-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "415.92.202603101737-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202602101357-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "417.94.202602090846-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "418.94.202602022246-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.19.9.6.202602112047-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.20.9.6.202602050328-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-config-sync-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-controller-podman-container-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-controller-podman-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-flow-collector-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-operator-bundle",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-router-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2.7.6-5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-service-controller-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-site-controller-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cost_management:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
            "product": "Cost Management 4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770836349",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1772160593",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1772160625",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-server-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1769104765",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1769111774",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3.5.6-0.1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:insights_proxy:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "insights-proxy/insights-proxy-container-rhel9",
            "product": "Red Hat Insights proxy 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770740405",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-sshd-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494649",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/configbump-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404535",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770764461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/devspaces-rhel9-operator",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494431",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/imagepuller-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404517",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/jetbrains-ide-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770759517",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/machineexec-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/openvsx-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770851052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/pluginregistry-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770918006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494726",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/installer-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770646925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/cds-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773670073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/haproxy-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773672059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/rhua-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773670137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-aarch64",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ovmf",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "compat-openssl10",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mingw-openssl",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "compat-openssl11",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-aarch64",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-01-27T14:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T12:04:30.139Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-15467"
          },
          {
            "name": "RHBZ#2430376",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2974"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:4419"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2659"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2671"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2072"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2633"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2077"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1496"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1472"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1733"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1594"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1519"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1503"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1473"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3228"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3461"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3462"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1736"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7261"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2485"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2844"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:4943"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2563"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:3415: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2974: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:4419: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2659: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2671: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2072: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2633: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2077: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6481: Red Hat Service Interconnect 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1496: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1733: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1594: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1519: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1503: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1473: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3228: Cost Management 4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3461: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3462: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1736: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7261: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2485: Red Hat Insights proxy 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2995: Red Hat JBoss Core Services 2.4.62.SP3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2844: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:4943: Red Hat Update Infrastructure 5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2563: Red Hat Update Infrastructure 5"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-01-16T14:21:50.710Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-01-27T14:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "3.6.1",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.5",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.4",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.3.6",
              "status": "affected",
              "version": "3.3.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.19",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Stanislav Fort (Aisle Research)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Igor Ustinov"
        }
      ],
      "datePublic": "2026-01-27T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\u003cbr\u003emaliciously crafted AEAD parameters can trigger a stack buffer overflow.\u003cbr\u003e\u003cbr\u003eImpact summary: A stack buffer overflow may lead to a crash, causing Denial\u003cbr\u003eof Service, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\u003cbr\u003eAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\u003cbr\u003ecopied into a fixed-size stack buffer without verifying that its length fits\u003cbr\u003ethe destination. An attacker can supply a crafted CMS message with an\u003cbr\u003eoversized IV, causing a stack-based out-of-bounds write before any\u003cbr\u003eauthentication or tag verification occurs.\u003cbr\u003e\u003cbr\u003eApplications and services that parse untrusted CMS or PKCS#7 content using\u003cbr\u003eAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\u003cbr\u003eBecause the overflow occurs prior to authentication, no valid key material\u003cbr\u003eis required to trigger it. While exploitability to remote code execution\u003cbr\u003edepends on platform and toolchain mitigations, the stack-based write\u003cbr\u003eprimitive represents a severe risk.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\u003cbr\u003eissue, as the CMS implementation is outside the OpenSSL FIPS module\u003cbr\u003eboundary.\u003cbr\u003e\u003cbr\u003eOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\u003cbr\u003e\u003cbr\u003eOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."
            }
          ],
          "value": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "High"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T17:44:51.846Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260127.txt"
        },
        {
          "name": "3.6.1 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703"
        },
        {
          "name": "3.5.5 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc"
        },
        {
          "name": "3.4.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3"
        },
        {
          "name": "3.3.6 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9"
        },
        {
          "name": "3.0.19 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2025-15467",
    "datePublished": "2026-01-27T16:01:19.922Z",
    "dateReserved": "2026-01-06T09:26:41.631Z",
    "dateUpdated": "2026-08-14T12:04:30.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-26380 (GCVE-0-2022-26380)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.784Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:57.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125: Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26380",
    "datePublished": "2022-04-12T09:07:57.000Z",
    "dateReserved": "2022-03-03T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:32.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-26335 (GCVE-0-2022-26335)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.
    Severity
    No CVSS data available.
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:31.738Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:55.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26335",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26335",
    "datePublished": "2022-04-12T09:07:55.000Z",
    "dateReserved": "2022-03-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:31.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-26334 (GCVE-0-2022-26334)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.
    Severity
    No CVSS data available.
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.480Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:54.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26334",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26334",
    "datePublished": "2022-04-12T09:07:54.000Z",
    "dateReserved": "2022-03-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:32.480Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25756 (GCVE-0-2022-25756)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.
    Severity
    No CVSS data available.
    CWE
    • CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.497Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:52.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25756",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25756",
    "datePublished": "2022-04-12T09:07:52.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.497Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25755 (GCVE-0-2022-25755)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.
    Severity
    No CVSS data available.
    CWE
    • CWE-284 - Improper Access Control
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:50.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25755",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-284: Improper Access Control"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25755",
    "datePublished": "2022-04-12T09:07:50.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25754 (GCVE-0-2022-25754)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server of the affected device could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request.
    Severity
    No CVSS data available.
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server of the affected device could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352: Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:49.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25754",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server of the affected device could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-352: Cross-Site Request Forgery (CSRF)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25754",
    "datePublished": "2022-04-12T09:07:49.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25753 (GCVE-0-2022-25753)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device.
    Severity
    No CVSS data available.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.901Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:47.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25753",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121: Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25753",
    "datePublished": "2022-04-12T09:07:47.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.901Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25752 (GCVE-0-2022-25752)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
    Severity
    No CVSS data available.
    CWE
    • CWE-330 - Use of Insufficiently Random Values
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-330",
              "description": "CWE-330: Use of Insufficiently Random Values",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:46.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25752",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-330: Use of Insufficiently Random Values"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25752",
    "datePublished": "2022-04-12T09:07:46.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-25751 (GCVE-0-2022-25751)

    Vulnerability from nvd – Published: 2022-04-12 09:07 – Updated: 2024-08-03 04:49
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices.
    Severity
    No CVSS data available.
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:43.841Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:43.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-25751",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20: Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-25751",
    "datePublished": "2022-04-12T09:07:43.000Z",
    "dateReserved": "2022-02-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:49:43.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2025-40833 (GCVE-0-2025-40833)

    Vulnerability from cvelistv5 – Published: 2026-05-12 08:20 – Updated: 2026-08-11 12:20
    VLAI
    Summary
    The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-05-12 13:30 UTC
    CWE
    • CWE-476 - NULL Pointer Dereference
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens IE/PB LINK HA Affected: 0 , < V4.1.2 (custom)
    		Create a notification for this product.
    Siemens IE/PB link PN IO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1748-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 EEC M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2IA M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W721-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W722-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W738-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W761-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 SFP Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2IA RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < V3.2.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2FM Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208PRO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X216 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X224 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 RD (inkl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF206-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF208 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC CFU DIQ Affected: 0 , < V2.0.0 (custom)
    		Create a notification for this product.
    Siemens SIMATIC CFU PA Affected: 0 , < V2.0.0 (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1510SP-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP CPU 1512SP-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC ET 200SP HA IM155-6 PN Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1511-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1511F-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1513-1 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1515-2 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1515F-2 PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 314C-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 315T-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317T-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 319-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-300 CPU 319F-3 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 412-2 PN V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) Affected: 0 , < V10.2 (custom)
    		Create a notification for this product.
    Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) Affected: 0 , < V8.3 (custom)
    		Create a notification for this product.
    Siemens SIMIT UNIT V10 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMIT UNIT V11 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS CBE20 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G115D Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120 (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120D Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120X Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G120XA Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G130 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G150 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S110 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S120 (incl. SIPLUS variants) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S150 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINUMERIK 840D sl Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET IE/PB link PN IO Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 314C-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 315-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 315F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 317-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-300 CPU 317F-2 PN/DP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 1AC 20 A/4x5 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 20 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 20 A/4x5 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A/4x10 A PN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP PSU8600 3AC 40 A/4x10A EIP Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 10 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 20 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 40 A Ethernet/ PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITOP UPS1600 EX 20 A Ethernet PROFINET Affected: 0 , < * (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40833",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-12T13:30:35.282908Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T13:31:06.530Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IE/PB LINK HA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "IE/PB link PN IO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) EU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M804PB",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M812-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M816-1 ADSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M826-2 SHDSL-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M874-3 3G-Router (CN)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-3 (ROK)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE M876-4 (NAM)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUB852-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUB852-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM853-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (A1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (B1)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (CN)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (EU)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE MUM856-1 (RoW)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 EEC LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE S615 LAN-Router",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC622-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC626-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC632-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC636-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC642-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE SC646-2C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2 EEC M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W1788-2IA M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W721-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W721-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W722-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W734-1 RJ45 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W738-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W738-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W748-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W761-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W761-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W774-1 RJ45 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W778-1 M12 EEC (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 SFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2 SFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2IA RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W786-2IA RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-1 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 M12 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE W788-2 RJ45",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAB762-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WAM766-1 EEC (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUB762-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUB762-1 iFeatures",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM763-1 (US)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1 (ME)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE WUM766-1 (USA)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2FM",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X216",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X224",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2 RD (inkl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF208",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-4C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-4C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-8C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM408-8C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM416-4C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XM416-4C (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 1x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 1x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 24V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 24V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 2x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR524-8C, 2x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 1x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 1x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 24V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 24V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 2x230V",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR526-8C, 2x230V (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (2HR2, L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR528-6M (L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2, L3 int.)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XR552-12M (2HR2)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU DIQ",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU PA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CFU PA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200pro IM 154-8FX PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200S IM 151-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200S IM 151-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP HA IM155-6 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 314C-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 315T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 317TF-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 319-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-300 CPU 319F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 412-2 PN V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 414-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 414F-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 416-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 CPU 416F-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V8.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMIT UNIT V10",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMIT UNIT V11",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS CBE20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G115D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G120XA",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G130",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS G150",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S110",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S120 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS S150",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINUMERIK 840D sl",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200S IM 151-8 PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200S IM 151-8F PN/DP CPU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET IE/PB link PN IO",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 314C-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 315-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 315F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 317-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-300 CPU 317F-2 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-400 CPU 414-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-400 CPU 416-3 PN/DP V7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 1AC 20 A/4x5 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 20 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 20 A/4x5 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A/4x10 A PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP PSU8600 3AC 40 A/4x10A EIP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 10 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 20 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 40 A Ethernet/ PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SITOP UPS1600 EX 20 A Ethernet PROFINET",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-11T12:20:12.548Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-392349.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2025-40833",
    "datePublished": "2026-05-12T08:20:46.879Z",
    "dateReserved": "2025-04-16T08:50:26.976Z",
    "dateUpdated": "2026-08-11T12:20:12.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-15467 (GCVE-0-2025-15467)

    Vulnerability from cvelistv5 – Published: 2026-01-27 16:01 – Updated: 2026-08-14 12:04
    VLAI
    Title
    Stack buffer overflow in CMS (Auth)EnvelopedData parsing
    Summary
    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.8 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: poc Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-03-19 00:00 UTC
    CWE
    • CWE-787 - Out-of-bounds Write
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    URL Tags
    https://openssl-library.org/news/secadv/20260127.txt vendor-advisory
    https://github.com/openssl/openssl/commit/2c8f0e5… patch
    https://github.com/openssl/openssl/commit/d0071a0… patch
    https://github.com/openssl/openssl/commit/6ced0fe… patch
    https://github.com/openssl/openssl/commit/5f26d42… patch
    https://github.com/openssl/openssl/commit/ce39170… patch
    http://www.openwall.com/lists/oss-security/2026/0…
    http://www.openwall.com/lists/oss-security/2026/02/25/6
    https://github.com/guiimoraes/CVE-2025-15467 exploit
    https://cert-portal.siemens.com/productcert/html/…
    https://cert-portal.siemens.com/productcert/html/…
    https://access.redhat.com/security/cve/CVE-2025-15467 vdb-entryx_refsource_REDHAT
    https://bugzilla.redhat.com/show_bug.cgi?id=2430376 issue-trackingx_refsource_REDHAT
    https://security.access.redhat.com/data/csaf/v2/v… x_sadp-csaf-vex
    https://access.redhat.com/errata/RHSA-2026:3415 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2974 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:4419 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2659 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2671 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2072 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2633 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2077 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:6481 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1496 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1472 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1733 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1594 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1519 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1503 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1473 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3228 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3461 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:3462 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:1736 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:7261 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2485 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2995 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2844 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:4943 vendor-advisoryx_refsource_REDHAT
    https://access.redhat.com/errata/RHSA-2026:2563 vendor-advisoryx_refsource_REDHAT
    Impacted products
    Vendor Product Version
    OpenSSL OpenSSL Affected: 3.6.0 , < 3.6.1 (semver)
    Affected: 3.5.0 , < 3.5.5 (semver)
    Affected: 3.4.0 , < 3.4.4 (semver)
    Affected: 3.3.0 , < 3.3.6 (semver)
    Affected: 3.0.0 , < 3.0.19 (semver)
    		Create a notification for this product.
    Siemens AI Lightweight Inference Server Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Connector for Azure Affected: 0 , < V1.8.0 (custom)
    		Create a notification for this product.
    Siemens Databus Affected: 0 , < V3.3.2 (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V7 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Desigo CC family V9 Affected: 0 , < V9.0 QU1 (custom)
    		Create a notification for this product.
    Siemens HiMed Cockpit Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000RE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1400 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1500 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1501 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1510 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1511 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1512 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1524 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1536 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX5000 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9403 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9413 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE LPE9433 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router family Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router family Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUB852-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X200-4P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X201-3P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X201-3P IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X202-2P IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2FM Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2LD TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204-2TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204IRT PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA (HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA (PRP) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (PRP) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X204RNA EEC (PRP/HSR) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X206-1LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X208PRO Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X212-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X216 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X224 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC316-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC332 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC416-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC424-4 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC432 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF201-3P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF206-1 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF208 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR302-32 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR322-12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 EEC Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR502-32 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR522-12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8WG Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens Shopfloor IT Suite Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIDIS Prime Affected: V4.0.700 , < * (custom)
    		Create a notification for this product.
    Siemens Siemens OPC UA Modelling Editor (SiOME) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC eaSie Core Package Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC eaSie PCS 7 Skill Package Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Basic Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Comfort Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC HMI Mobile Panels Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Industrial Thin Client Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IoT2050 Advanced Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC BX-21A Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC MD-57A Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC IPC ORCLA Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Logon V1.6 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC Logon V2.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV530 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV530 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 H CRANES Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV540 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV550 H Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV550 S Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV560 U Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC MV560 X Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC PCS neo V6.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC PDM V9.3 Affected: 0 , < V9.3 SP2 (custom)
    		Create a notification for this product.
    Siemens SIMATIC RTLS Locating Manager Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC STEP 7 V5 Affected: 0 , < V5.7 SP4 (custom)
    		Create a notification for this product.
    Siemens SIMATIC Target Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.19 Affected: 0 , < V3.19 P024 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.20 Affected: 0 , < V3.20 P012 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC OA V3.21 Affected: 0 , < V3.21 P02 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC Runtime Advanced V17 Affected: 0 , < V17 Update 9 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC Unified Sequence Affected: 0 , < V21 (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V7.5 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V8.0 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMATIC WinCC V8.1 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMOTION OACAMGEN Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.1 Affected: 0 , < V3.1.13 (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.2 Affected: 0 , < V3.2.4 (custom)
    		Create a notification for this product.
    Siemens SIMOVE Fleetmanager V3.3 Affected: 0 , < V3.3.2 (custom)
    		Create a notification for this product.
    Siemens SINAMICS G200 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS G220 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S200 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S210 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINAMICS S220 Affected: V6.3 , < * (custom)
    		Create a notification for this product.
    Siemens SINEC INS Affected: 0 , < V1.0 SP2 Update 5 (custom)
    		Create a notification for this product.
    Siemens SINEC NMS Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINEC Security Monitor Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SINUMERIK Access MyMachine /OPC UA Affected: 0 , < V4.2 SP3 (custom)
    		Create a notification for this product.
    Siemens SIPLANT Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X202-2P IRT Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITRANS ASM IQ Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens User Management Component (UMC) Affected: 0 , < V2.15.3.0 (custom)
    		Create a notification for this product.
    Siemens Visual Inspection Cockpit Affected: 0 , < * (custom)
    		Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10 Unaffected: 1:3.5.1-7.el10_1 , < * (rpm)
        cpe:/o:redhat:enterprise_linux:10.1
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Unaffected: 1:3.2.2-16.el10_0.6 , < * (rpm)
        cpe:/o:redhat:enterprise_linux_eus:10.0
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9 Unaffected: 1:3.5.1-7.el9_7 , < * (rpm)
        cpe:/a:redhat:enterprise_linux:9
        cpe:/o:redhat:enterprise_linux:9
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Unaffected: 1:3.0.1-46.el9_0.7 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.0
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Unaffected: 1:3.0.7-18.el9_2.3 , < * (rpm)
        cpe:/a:redhat:rhel_e4s:9.2
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Unaffected: 1:3.0.7-29.el9_4.2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.4
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support Unaffected: 1:3.2.2-7.el9_6.2 , < * (rpm)
        cpe:/a:redhat:rhel_eus:9.6
    		 Create a notification for this product.
    Red Hat Red Hat JBoss Core Services 2.4.62.SP3     cpe:/a:redhat:jboss_core_services:1
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.13 Unaffected: 413.92.202602240113-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.13::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.14 Unaffected: 414.92.202602171627-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.14::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.15 Unaffected: 415.92.202603101737-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.15::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.16 Unaffected: 416.94.202602101357-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.16::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.17 Unaffected: 417.94.202602090846-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.17::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.18 Unaffected: 418.94.202602022246-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.18::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.19 Unaffected: 4.19.9.6.202602112047-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.19::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Container Platform 4.20 Unaffected: 4.20.9.6.202602050328-0 , < * (rpm)
        cpe:/a:redhat:openshift:4.20::el9
    		 Create a notification for this product.
    Red Hat Service Interconnect 1 for RHEL 9 Unaffected: 1.8.8-1 , < * (rpm)
        cpe:/a:redhat:service_interconnect:1::el9
    		 Create a notification for this product.
    Red Hat Service Interconnect 1 for RHEL 9 Unaffected: 2.7.6-5 , < * (rpm)
        cpe:/a:redhat:service_interconnect:1::el9
    		 Create a notification for this product.
    Red Hat Cost Management 4 Unaffected: 1770836349 , < * (rpm)
        cpe:/a:redhat:cost_management:4::el9
    		 Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1772160593 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    		 Create a notification for this product.
    Red Hat Red Hat AI Inference Server 3.2 Unaffected: 1772160625 , < * (rpm)
        cpe:/a:redhat:ai_inference_server:3.2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1769104765 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Discovery 2 Unaffected: 1769111774 , < * (rpm)
        cpe:/a:redhat:discovery:2::el9
    		 Create a notification for this product.
    Red Hat Red Hat Hardened Images Unaffected: 3.5.6-0.1.hum1 , < * (rpm)
        cpe:/a:redhat:hummingbird:1
    		 Create a notification for this product.
    Red Hat Red Hat Insights proxy 1.5 Unaffected: 1770740405 , < * (rpm)
        cpe:/a:redhat:insights_proxy:1.5::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494649 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404535 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770764461 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494431 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404517 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770759517 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770404430 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770851052 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770918006 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 Unaffected: 1770494726 , < * (rpm)
        cpe:/a:redhat:openshift_devspaces:3.26::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1770646925 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773670073 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773672059 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Update Infrastructure 5 Unaffected: 1773670137 , < * (rpm)
        cpe:/a:redhat:rhui:5::el9
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 10     cpe:/o:redhat:enterprise_linux:10
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 6     cpe:/o:redhat:enterprise_linux:6
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 7     cpe:/o:redhat:enterprise_linux:7
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 8     cpe:/o:redhat:enterprise_linux:8
    		 Create a notification for this product.
    Red Hat Red Hat Enterprise Linux 9     cpe:/o:redhat:enterprise_linux:9
    		 Create a notification for this product.
    Date Public
    2026-01-27 14:00
    Credits
    Stanislav Fort (Aisle Research) Igor Ustinov
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-25T21:10:03.795Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/01/27/10"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/02/25/6"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-15467",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-19T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-20T03:55:41.609Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/guiimoraes/CVE-2025-15467"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "AI Lightweight Inference Server",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Connector for Azure",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.8.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Databus",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V7",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V9",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.0 QU1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "HiMed Cockpit",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) EU",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000RE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1500",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1501",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1510",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1511",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1524",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1536",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9403",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9413",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE LPE9433",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M804PB",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M826-2 SHDSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3 3G-Router (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3 (ROK)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (NAM)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUB852-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUB852-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (RoW)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 EEC LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC622-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC626-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC632-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC636-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC642-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC646-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1 iFeatures",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X200-4P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X200-4P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X201-3P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X202-2P IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2FM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2LD TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204-2TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204IRT PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA (HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA (PRP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (PRP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X204RNA EEC (PRP/HSR)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X206-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X206-1LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X208PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X212-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X212-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X224",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X304-2FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X306-1LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1 FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1-2LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X408-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC316-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC416-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC424-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC432",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF201-3P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF206-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Shopfloor IT Suite",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIDIS Prime",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V4.0.700",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Siemens OPC UA Modelling Editor (SiOME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC eaSie Core Package",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC eaSie PCS 7 Skill Package",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Basic Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Comfort Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC HMI Mobile Panels",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Industrial Thin Client",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IoT2050 Advanced",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC BX-21A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC MD-57A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC ORCLA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Logon V1.6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Logon V2.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV530 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV530 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 H CRANES",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV540 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV550 H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV550 S",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV560 U",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC MV560 X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC PCS neo V6.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC PDM V9.3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.3 SP2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC RTLS Locating Manager",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC STEP 7 V5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.7 SP4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Target",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.19",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.19 P024",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.20",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.20 P012",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.21",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.21 P02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Runtime Advanced V17",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V17 Update 9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Unified Sequence",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V7.5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V8.0",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V8.1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOTION OACAMGEN",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2.4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMOVE Fleetmanager V3.3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS G200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS G220",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S210",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINAMICS S220",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V6.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC INS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0 SP2 Update 5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC NMS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC Security Monitor",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINUMERIK Access MyMachine /OPC UA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.2 SP3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLANT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X202-2P IRT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SITRANS ASM IQ",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "User Management Component (UMC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.15.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Visual Inspection Cockpit",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T12:22:38.618Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-434797.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-734552.html"
          }
        ],
        "x_adpType": "supplier"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.5.1-7.el10_1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.2.2-16.el10_0.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9",
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.5.1-7.el9_7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.1-46.el9_0.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.7-18.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.0.7-29.el9_4.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:3.2.2-7.el9_6.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_core_services:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat JBoss Core Services 2.4.62.SP3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "413.92.202602240113-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "414.92.202602171627-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "415.92.202603101737-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202602101357-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "417.94.202602090846-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "418.94.202602022246-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.19.9.6.202602112047-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.20.9.6.202602050328-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-config-sync-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-controller-podman-container-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-controller-podman-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-flow-collector-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-operator-bundle",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-router-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2.7.6-5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-service-controller-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "service-interconnect/skupper-site-controller-rhel9",
            "product": "Service Interconnect 1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.8.8-1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cost_management:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
            "product": "Cost Management 4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770836349",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1772160593",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1772160625",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-server-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1769104765",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1769111774",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openssl-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3.5.6-0.1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:insights_proxy:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "insights-proxy/insights-proxy-container-rhel9",
            "product": "Red Hat Insights proxy 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770740405",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-sshd-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494649",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/configbump-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404535",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770764461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/devspaces-rhel9-operator",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494431",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/imagepuller-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404517",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/jetbrains-ide-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770759517",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/machineexec-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770404430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/openvsx-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770851052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/pluginregistry-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770918006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.26::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770494726",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/installer-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1770646925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/cds-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773670073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/haproxy-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773672059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/rhua-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1773670137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-aarch64",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ovmf",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "compat-openssl10",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mingw-openssl",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openssl",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "compat-openssl11",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edk2",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-aarch64",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "shim-unsigned-x64",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-01-27T14:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T12:04:30.139Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-15467"
          },
          {
            "name": "RHBZ#2430376",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2974"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:4419"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2659"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2671"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2072"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2633"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2077"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:6481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1496"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1472"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1733"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1594"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1519"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1503"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1473"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3228"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3461"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3462"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:1736"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7261"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2485"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2844"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:4943"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2563"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:3415: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2974: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:4419: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2659: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2671: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2072: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2633: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2077: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:6481: Red Hat Service Interconnect 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1496: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1733: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1594: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1519: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1503: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1473: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3228: Cost Management 4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3461: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3462: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:1736: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7261: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2485: Red Hat Insights proxy 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2995: Red Hat JBoss Core Services 2.4.62.SP3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2844: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:4943: Red Hat Update Infrastructure 5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2563: Red Hat Update Infrastructure 5"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-01-16T14:21:50.710Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-01-27T14:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "3.6.1",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.5",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.4",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.3.6",
              "status": "affected",
              "version": "3.3.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.19",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Stanislav Fort (Aisle Research)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Igor Ustinov"
        }
      ],
      "datePublic": "2026-01-27T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\u003cbr\u003emaliciously crafted AEAD parameters can trigger a stack buffer overflow.\u003cbr\u003e\u003cbr\u003eImpact summary: A stack buffer overflow may lead to a crash, causing Denial\u003cbr\u003eof Service, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\u003cbr\u003eAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\u003cbr\u003ecopied into a fixed-size stack buffer without verifying that its length fits\u003cbr\u003ethe destination. An attacker can supply a crafted CMS message with an\u003cbr\u003eoversized IV, causing a stack-based out-of-bounds write before any\u003cbr\u003eauthentication or tag verification occurs.\u003cbr\u003e\u003cbr\u003eApplications and services that parse untrusted CMS or PKCS#7 content using\u003cbr\u003eAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\u003cbr\u003eBecause the overflow occurs prior to authentication, no valid key material\u003cbr\u003eis required to trigger it. While exploitability to remote code execution\u003cbr\u003edepends on platform and toolchain mitigations, the stack-based write\u003cbr\u003eprimitive represents a severe risk.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\u003cbr\u003eissue, as the CMS implementation is outside the OpenSSL FIPS module\u003cbr\u003eboundary.\u003cbr\u003e\u003cbr\u003eOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\u003cbr\u003e\u003cbr\u003eOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."
            }
          ],
          "value": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "High"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T17:44:51.846Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260127.txt"
        },
        {
          "name": "3.6.1 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703"
        },
        {
          "name": "3.5.5 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc"
        },
        {
          "name": "3.4.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3"
        },
        {
          "name": "3.3.6 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9"
        },
        {
          "name": "3.0.19 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Stack buffer overflow in CMS (Auth)EnvelopedData parsing",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2025-15467",
    "datePublished": "2026-01-27T16:01:19.922Z",
    "dateReserved": "2026-01-06T09:26:41.631Z",
    "dateUpdated": "2026-08-14T12:04:30.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-26380 (GCVE-0-2022-26380)

    Vulnerability from cvelistv5 – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.784Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:57.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125: Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26380",
    "datePublished": "2022-04-12T09:07:57.000Z",
    "dateReserved": "2022-03-03T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:32.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-26335 (GCVE-0-2022-26335)

    Vulnerability from cvelistv5 – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.
    Severity
    No CVSS data available.
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:31.738Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:55.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26335",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26335",
    "datePublished": "2022-04-12T09:07:55.000Z",
    "dateReserved": "2022-03-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:31.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2022-26334 (GCVE-0-2022-26334)

    Vulnerability from cvelistv5 – Published: 2022-04-12 09:07 – Updated: 2024-08-03 05:03
    VLAI
    Summary
    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.
    Severity
    No CVSS data available.
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Siemens SCALANCE X302-7 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: All versions < V4.1.4
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: All versions < V4.1.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.480Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SCALANCE X302-7 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X304-2FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X306-1LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X307-3LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2LH+",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M PoE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X308-2M TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X310FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1 FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X320-1-2LD FE",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE X408-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-12M TS (24V)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        },
        {
          "product": "SIPLUS NET SCALANCE X308-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.1.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-12T09:07:54.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-26334",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X304-2FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X306-1LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X307-3LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2LH+",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M PoE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X308-2M TS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X310FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1 FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X320-1-2LD FE",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE X408-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-12M TS (24V)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPLUS NET SCALANCE X308-2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26334",
    "datePublished": "2022-04-12T09:07:54.000Z",
    "dateReserved": "2022-03-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:03:32.480Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    VAR-202107-1608

    Vulnerability from variot - Updated: 2024-12-10 21:10

    Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device. Multiple Siemens products contain vulnerabilities in resource allocation without restrictions or throttling.Service operation interruption (DoS) It may be in a state. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements. Siemens SCALANCE S602是德国西门子（Siemens）公司的一款工业安全设备. Siemens多款产品 存在安全漏洞，该漏洞允许攻击者执行拒绝服务攻击。以下产品和版本受到影响：Development/Evaluation Kits for PROFINET IO： DK Standard Ethernet Controller (All versions), Development/Evaluation Kits for PROFINET IO： EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO： EK-ERTEC 200P (All versions), RUGGEDCOM RM1224 (All Versions ＜ 6.4), SCALANCE M-800 (All Versions ＜ 6.4), SCALANCE S615 (All Versions ＜ 6.4), SCALANCE W1700 IEEE 802.11ac (All versions), SCALANCE W700 IEEE 802.11n (All versions), SCALANCE X200-4 P IRT (All Versions ＜ V5.5.0), SCALANCE X201-3P IRT (All Versions ＜ V5.5.0), SCALANCE X201-3P IRT PRO (All Versions ＜ V5.5.0), SCALANCE X202-2 IRT (All Versions ＜ V5.5.0), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All Versions ＜ V5.5.0), SCALANCE X202-2P IRT PRO (All Versions ＜ V5.5.0), SCALANCE X204 IRT (All Versions ＜ V5.5.0), SCALANCE X204 IRT PRO (All Versions ＜ V5.5.0), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions), SCALANCE X204-2FM (All versions), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions), SCALANCE X204-2LD TS (All versions), SCALANCE X204-2TS (All versions), SCALANCE X206-1 (All versions), SCALANCE X206-1LD (incl. SIPLUS NET variant) (All versions), SCALANCE X208 (incl. SIPLUS NET variant) (All versions), SCALANCE X208PRO (All versions), SCALANCE X212-2 (All versions), SCALANCE X212-2LD (All versions), SCALANCE X216 (All versions), SCALANCE X224 (All versions), SCALANCE X302-7EEC (All versions), SCALANCE X304-2FE (All versions), SCALANCE X306-1LDFE (All versions), SCALANCE X307-2EEC (All versions), SCALANCE X307-3 (All versions), SCALANCE X307-3LD (All versions), SCALANCE X308-2 (incl. SIPLUS NET variant) (All versions), SCALANCE X308-2LD (All versions), SCALANCE X308-2LH (All versions), SCALANCE X308-2LH+ (All versions), SCALANCE X308-2M (All versions), SCALANCE X308-2M POE (All versions), SCALANCE X308-2M TS (All versions), SCALANCE X310 (All versions), SCALANCE X310FE (All versions), SCALANCE X320-1FE (All versions), SCALANCE X320-3LDFE (All versions), SCALANCE XB-200 (All versions), SCALANCE XC-200 (All versions), SCALANCE XF-200BA (All versions), SCALANCE XF201-3P IRT (All Versions ＜ V5.5.0), SCALANCE XF202-2P IRT (All Versions ＜ V5.5.0), SCALANCE XF204 (All versions), SCALANCE XF204 IRT (All Versions ＜ V5.5.0), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions), SCALANCE XF204-2BA IRT (All Versions ＜ V5.5.0), SCALANCE XF206-1 (All versions), SCALANCE XF208 (All versions), SCALANCE XM400 (All versions ＜ V6.3.1), SCALANCE XP-200 (All versions), SCALANCE XR-300WG (All versions), SCALANCE XR324-12M (All versions), SCALANCE XR324-12M TS (All versions), SCALANCE XR324-4M EEC (All versions), SCALANCE XR324-4M POE (All versions), SCALANCE XR324-4M POE TS (All versions), SCALANCE XR500 (All versions ＜ V6.3.1), SIMATIC CFU PA (All versions), SIMATIC IE/PB-LINK V3 (All versions), SIMATIC MV500 family (All versions ＜ V3.0), SIMATIC NET CM 1542-1 (All versions), SIMATIC NET CP1616/CP1604 (All Versions ＞= V2.7), SIMATIC NET CP1626 (All versions), SIMATIC NET DK-16xx PN IO (All Versions ＞= V2.7), SIMATIC PROFINET Driver (All versions), SIMATIC Power Line Booster PLB, Base Module (MLFB： 6ES7972-5AA10-0AB0) (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All Versions ＜ V4.5), SIMOCODE proV Ethernet/IP (All versions ＜ V1.1.3), SIMOCODE proV PROFINET (All versions ＜ V2.1.3), SOFTNET-IE PNIO (All versions)

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202107-1608",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance x307-3ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x204-2fm",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic profinet driver",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.3"
      },
      {
        "model": "simocode prov profinet",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.1.3"
      },
      {
        "model": "scalance xp-200",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.3"
      },
      {
        "model": "scalance x307-3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc-200",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.3"
      },
      {
        "model": "scalance xf204 irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xf-200ba",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.3"
      },
      {
        "model": "scalance x208pro",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic net dk-16xx pn io",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7"
      },
      {
        "model": "scalance x200-4 p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xf204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic s7-1200",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.5"
      },
      {
        "model": "scalance s615",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.4"
      },
      {
        "model": "scalance x320-3ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x308-2m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x206-1ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic mv500",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.0"
      },
      {
        "model": "scalance xf204-2ba irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "simatic net cm 1542-1",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x310",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "softnet-ie pnio",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "ruggedcom rm1224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.4"
      },
      {
        "model": "scalance xf201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "dk standard ethernet controller evaluation kit",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xr-300wg",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.3"
      },
      {
        "model": "scalance w1700",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x202-2 irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x308-2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xr500",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.3.1"
      },
      {
        "model": "scalance w700",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x212-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic power line booster plb",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x204-2ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xm400",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.3.1"
      },
      {
        "model": "scalance x204 irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x204 irt pro",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "simatic net cp1604",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7"
      },
      {
        "model": "scalance x202-2p irt pro",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "ek-ertec 200 evaulation kit",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic net cp1616",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.7"
      },
      {
        "model": "scalance x212-2ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simocode prov ethernet\\/ip",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "1.1.3"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xr324-4m eec",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance m-800",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf204",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "simatic net cp1626",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x204-2ld ts",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cfu pa",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x204-2ts",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "ek-ertec 200p evaluation kit",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.7"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic ie\\/pb-link v3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x201-3p irt pro",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xb-200",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.3"
      },
      {
        "model": "scalance xf202-2p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x200-4p irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "dk standard ethernet controller evaluation kit",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance w1700",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance s615",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "ek-ertec 200p evaluation kit",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x201-3p irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "ek-ertec 200 evaluation kit",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance w700",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance m-800",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "ruggedcom rm1224",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Siemens reported this vulnerability to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-28400",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2020-28400",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2020-28400",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 2.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2020-28400",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-28400",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "productcert@siemens.com",
            "id": "CVE-2020-28400",
            "trust": 1.0,
            "value": "High"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-28400",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202104-975",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202107-901",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device. Multiple Siemens products contain vulnerabilities in resource allocation without restrictions or throttling.Service operation interruption (DoS) It may be in a state. Pillow is a Python-based image processing library. \nThere is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements. Siemens SCALANCE S602\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5de5\u4e1a\u5b89\u5168\u8bbe\u5907. \nSiemens\u591a\u6b3e\u4ea7\u54c1 \u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u5141\u8bb8\u653b\u51fb\u8005\u6267\u884c\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u3002\u4ee5\u4e0b\u4ea7\u54c1\u548c\u7248\u672c\u53d7\u5230\u5f71\u54cd\uff1aDevelopment/Evaluation Kits for PROFINET IO\uff1a DK Standard Ethernet Controller (All versions), Development/Evaluation Kits for PROFINET IO\uff1a EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO\uff1a EK-ERTEC 200P (All versions), RUGGEDCOM RM1224 (All Versions \uff1c 6.4), SCALANCE M-800 (All Versions \uff1c 6.4), SCALANCE S615 (All Versions \uff1c 6.4), SCALANCE W1700 IEEE 802.11ac (All versions), SCALANCE W700 IEEE 802.11n (All versions), SCALANCE X200-4 P IRT (All Versions \uff1c V5.5.0), SCALANCE X201-3P IRT (All Versions \uff1c V5.5.0), SCALANCE X201-3P IRT PRO (All Versions \uff1c V5.5.0), SCALANCE X202-2 IRT (All Versions \uff1c V5.5.0), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All Versions \uff1c V5.5.0), SCALANCE X202-2P IRT PRO (All Versions \uff1c V5.5.0), SCALANCE X204 IRT (All Versions \uff1c V5.5.0), SCALANCE X204 IRT PRO (All Versions \uff1c V5.5.0), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions), SCALANCE X204-2FM (All versions), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions), SCALANCE X204-2LD TS (All versions), SCALANCE X204-2TS (All versions), SCALANCE X206-1 (All versions), SCALANCE X206-1LD (incl. SIPLUS NET variant) (All versions), SCALANCE X208 (incl. SIPLUS NET variant) (All versions), SCALANCE X208PRO (All versions), SCALANCE X212-2 (All versions), SCALANCE X212-2LD (All versions), SCALANCE X216 (All versions), SCALANCE X224 (All versions), SCALANCE X302-7EEC (All versions), SCALANCE X304-2FE (All versions), SCALANCE X306-1LDFE (All versions), SCALANCE X307-2EEC (All versions), SCALANCE X307-3 (All versions), SCALANCE X307-3LD (All versions), SCALANCE X308-2 (incl. SIPLUS NET variant) (All versions), SCALANCE X308-2LD (All versions), SCALANCE X308-2LH (All versions), SCALANCE X308-2LH+ (All versions), SCALANCE X308-2M (All versions), SCALANCE X308-2M POE (All versions), SCALANCE X308-2M TS (All versions), SCALANCE X310 (All versions), SCALANCE X310FE (All versions), SCALANCE X320-1FE (All versions), SCALANCE X320-3LDFE (All versions), SCALANCE XB-200 (All versions), SCALANCE XC-200 (All versions), SCALANCE XF-200BA (All versions), SCALANCE XF201-3P IRT (All Versions \uff1c V5.5.0), SCALANCE XF202-2P IRT (All Versions \uff1c V5.5.0), SCALANCE XF204 (All versions), SCALANCE XF204 IRT (All Versions \uff1c V5.5.0), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions), SCALANCE XF204-2BA IRT (All Versions \uff1c V5.5.0), SCALANCE XF206-1 (All versions), SCALANCE XF208 (All versions), SCALANCE XM400 (All versions \uff1c V6.3.1), SCALANCE XP-200 (All versions), SCALANCE XR-300WG (All versions), SCALANCE XR324-12M (All versions), SCALANCE XR324-12M TS (All versions), SCALANCE XR324-4M EEC (All versions), SCALANCE XR324-4M POE (All versions), SCALANCE XR324-4M POE TS (All versions), SCALANCE XR500 (All versions \uff1c V6.3.1), SIMATIC CFU PA (All versions), SIMATIC IE/PB-LINK V3 (All versions), SIMATIC MV500 family (All versions \uff1c V3.0), SIMATIC NET CM 1542-1 (All versions), SIMATIC NET CP1616/CP1604 (All Versions \uff1e= V2.7), SIMATIC NET CP1626 (All versions), SIMATIC NET DK-16xx PN IO (All Versions \uff1e= V2.7), SIMATIC PROFINET Driver (All versions), SIMATIC Power Line Booster PLB, Base Module (MLFB\uff1a 6ES7972-5AA10-0AB0) (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All Versions \uff1c V4.5), SIMOCODE proV Ethernet/IP (All versions \uff1c V1.1.3), SIMOCODE proV PROFINET (All versions \uff1c V2.1.3), SOFTNET-IE PNIO (All versions)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28400"
      }
    ],
    "trust": 2.79
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-28400",
        "trust": 3.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-194-03",
        "trust": 2.4
      },
      {
        "db": "SIEMENS",
        "id": "SSA-599968",
        "trust": 1.7
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133",
        "trust": 0.8
      },
      {
        "db": "CS-HELP",
        "id": "SB2021041363",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2401",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021071416",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28400",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "id": "VAR-202107-1608",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.5441019396774194
  },
  "last_update_date": "2024-12-10T21:10:13.937000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-599968",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf"
      },
      {
        "title": "Siemens Various product security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=156594"
      },
      {
        "title": "Siemens Security Advisories: Siemens Security Advisory",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=77fc0ba2dcd8966c9a1f7eb47b8603ca"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-770",
        "trust": 1.0
      },
      {
        "problemtype": "Allocation of resources without limits or throttling (CWE-770) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-194-03"
      },
      {
        "trust": 1.7,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-599968.pdf"
      },
      {
        "trust": 1.0,
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-599968.html"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-28400"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-194-03"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021041363"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/siemens-ruggedcom-simatic-denial-of-service-via-profinet-dcp-reset-35890"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021071416"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2401"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/770.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-599968.txt"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-07-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "date": "2022-06-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "date": "2021-04-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "date": "2021-07-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "date": "2021-07-13T11:15:08.960000",
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-07-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-28400"
      },
      {
        "date": "2022-06-22T02:38:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      },
      {
        "date": "2021-04-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      },
      {
        "date": "2024-12-10T14:15:19.373000",
        "db": "NVD",
        "id": "CVE-2020-28400"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Vulnerability in limiting or non-slotting resource allocation in multiple Siemens products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-010133"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202104-975"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202107-901"
      }
    ],
    "trust": 1.2
  }
}

    VAR-202204-0499

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device. plural SCALANCE The product contains a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0499",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-25756",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2022-25756",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.2,
            "id": "CNVD-2022-28481",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 2.8,
            "id": "CVE-2022-25756",
            "impactScore": 2.7,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 6.1,
            "baseSeverity": "Medium",
            "confidentialityImpact": "Low",
            "exploitabilityScore": null,
            "id": "CVE-2022-25756",
            "impactScore": null,
            "integrityImpact": "Low",
            "privilegesRequired": "None",
            "scope": "Changed",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25756",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25756",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28481",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3137",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25756",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device. plural  SCALANCE The product contains a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25756",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "id": "VAR-202204-0499",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.848000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Cross-Site Scripting Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329331"
      },
      {
        "title": "Multiple  Siemens Fixes for product cross-site scripting vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190127"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-79",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-80",
        "trust": 1.0
      },
      {
        "problemtype": "Cross-site scripting (CWE-79) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25756"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25756/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/79.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "date": "2022-04-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "date": "2022-04-12T09:15:14.837000",
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28481"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25756"
      },
      {
        "date": "2022-04-26T08:55:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      },
      {
        "date": "2024-11-21T06:52:56.657000",
        "db": "NVD",
        "id": "CVE-2022-25756"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Cross-site scripting vulnerabilities in products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001593"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "XSS",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3137"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0501

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices. plural SCALANCE The product contains an input verification vulnerability.Denial of service (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0501",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-25751",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-25751",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2022-28486",
            "impactScore": 7.8,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-25751",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2022-25751",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25751",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25751",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28486",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3142",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25751",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices. plural  SCALANCE The product contains an input verification vulnerability.Denial of service  (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25751",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "id": "VAR-202204-0501",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.761000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Input Validation Error Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329281"
      },
      {
        "title": "Multiple  Siemens Product input verification error vulnerability fixes",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190132"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-20",
        "trust": 1.0
      },
      {
        "problemtype": "Incorrect input confirmation (CWE-20) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/vu/jvnvu91165555/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25751"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25751/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/20.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "date": "2022-04-25T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "date": "2022-04-12T09:15:14.597000",
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28486"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25751"
      },
      {
        "date": "2022-04-25T08:16:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      },
      {
        "date": "2024-11-21T06:52:55.653000",
        "db": "NVD",
        "id": "CVE-2022-25751"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Product input verification vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001578"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "input validation error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3142"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0502

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain an out-of-bounds read vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0502",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x408-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m ts",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-26380",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-26380",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2022-28478",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-26380",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2022-26380",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-26380",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-26380",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28478",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3133",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-26380",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain an out-of-bounds read vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-26380",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 3.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "id": "VAR-202204-0502",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.705000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Out-of-Bounds Read Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329351"
      },
      {
        "title": "Multiple  Siemens Product Buffer Error Vulnerability Fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190124"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-125",
        "trust": 1.0
      },
      {
        "problemtype": "Out-of-bounds read (CWE-125) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-26380"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-104-09"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-26380/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/125.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "date": "2023-07-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "date": "2022-04-12T09:15:14.970000",
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28478"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26380"
      },
      {
        "date": "2023-07-24T08:22:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      },
      {
        "date": "2024-11-21T06:53:52.853000",
        "db": "NVD",
        "id": "CVE-2022-26380"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Out-of-bounds read vulnerabilities in multiple Siemens products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008105"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3133"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0500

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances. plural SCALANCE The product contains a vulnerability related to the leakage of resources to the wrong area.Information may be obtained. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0500",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-25755",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-25755",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 1.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.2,
            "id": "CNVD-2022-28482",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 0.6,
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-25755",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-25755",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25755",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25755",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28482",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3138",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25755",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances. plural  SCALANCE The product contains a vulnerability related to the leakage of resources to the wrong area.Information may be obtained. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25755",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "id": "VAR-202204-0500",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.612000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Access Control Error Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329321"
      },
      {
        "title": "Siemens SCALANCE Security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=245132"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-284",
        "trust": 1.0
      },
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      },
      {
        "problemtype": "Leakage of resources to the wrong area (CWE-668) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25755"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25755/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/668.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "date": "2022-04-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "date": "2022-04-12T09:15:14.793000",
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28482"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25755"
      },
      {
        "date": "2022-04-26T08:58:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      },
      {
        "date": "2023-07-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      },
      {
        "date": "2024-11-21T06:52:56.460000",
        "db": "NVD",
        "id": "CVE-2022-25755"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Vulnerability in leaking resources to the wrong area in the product",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001594"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3138"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0498

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device. plural SCALANCE The product contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0498",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-25753",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.0,
            "id": "CVE-2022-25753",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.6,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 4.9,
            "id": "CNVD-2022-28484",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2022-25753",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-25753",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25753",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25753",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28484",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3141",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25753",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device. plural  SCALANCE The product contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service is disrupted  (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25753",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "id": "VAR-202204-0498",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.550000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Buffer Overflow Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329311"
      },
      {
        "title": "Multiple  Siemens product Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190131"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-121",
        "trust": 1.0
      },
      {
        "problemtype": "Out-of-bounds writing (CWE-787) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25753"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25753/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/787.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "date": "2022-04-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "date": "2022-04-12T09:15:14.700000",
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28484"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25753"
      },
      {
        "date": "2022-04-26T09:01:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      },
      {
        "date": "2024-11-21T06:52:56.073000",
        "db": "NVD",
        "id": "CVE-2022-25753"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Out-of-bounds write vulnerabilities in the product",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001596"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3141"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0494

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions.

    A buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family Devices that could allow attackers to crash the device

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0494",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x408-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m ts",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-26335",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-26335",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2022-28479",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-26335",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2022-26335",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-26335",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-26335",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28479",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3134",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-26335",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions. \n\r\n\r\nA buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family Devices that could allow attackers to crash the device",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-26335",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 3.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "id": "VAR-202204-0494",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.519000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Buffer Overflow Vulnerability (CNVD-2022-28479)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329341"
      },
      {
        "title": "Multiple  Siemens Product security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190125"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-120",
        "trust": 1.0
      },
      {
        "problemtype": "Classic buffer overflow (CWE-120) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-26335"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-104-09"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-26335/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/120.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "date": "2023-07-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "date": "2022-04-12T09:15:14.923000",
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28479"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26335"
      },
      {
        "date": "2023-07-24T08:22:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      },
      {
        "date": "2024-11-21T06:53:46.287000",
        "db": "NVD",
        "id": "CVE-2022-26335"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Classic buffer overflow vulnerability in multiple Siemens products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008106"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3134"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0496

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions. plural SCALANCE The product is vulnerable to the use of inadequate random values.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0496",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "cve": "CVE-2022-25752",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-25752",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2022-28485",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-25752",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-25752",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25752",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25752",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28485",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3140",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25752",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions. plural  SCALANCE The product is vulnerable to the use of inadequate random values.Information is obtained, information is tampered with, and service is disrupted  (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25752",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 0.9
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "id": "VAR-202204-0496",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.436000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Unknown Vulnerability in Siemens SCALANCE X-300 Switch Family Devices",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329306"
      },
      {
        "title": "Multiple  Siemens Repair measures for product security feature vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190130"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-330",
        "trust": 1.0
      },
      {
        "problemtype": "Use of insufficient random values (CWE-330) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25752"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25752/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/330.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "date": "2022-04-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "date": "2022-04-12T09:15:14.650000",
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28485"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25752"
      },
      {
        "date": "2022-04-26T09:02:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      },
      {
        "date": "2024-11-21T06:52:55.867000",
        "db": "NVD",
        "id": "CVE-2022-25752"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Insufficient random value usage vulnerability in product",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001597"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "security feature problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3140"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0497

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions.

    A buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family Devices that could allow attackers to crash the device

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0497",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x408-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m ts",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x310",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-26334",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2022-26334",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2022-28480",
            "impactScore": 8.5,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2022-26334",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2022-26334",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-26334",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-26334",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28480",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3135",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-26334",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices. SCALANCE X302-7EEC firmware, SCALANCE X304-2FE firmware, SCALANCE X306-1LDFE Multiple Siemens products, such as firmware, contain a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions. \n\r\n\r\nA buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family Devices that could allow attackers to crash the device",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-26334",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 3.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "id": "VAR-202204-0497",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.405000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Buffer Overflow Vulnerability (CNVD-2022-28480)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329336"
      },
      {
        "title": "Siemens SCALANCE Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190126"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-120",
        "trust": 1.0
      },
      {
        "problemtype": "Classic buffer overflow (CWE-120) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-26334"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-104-09"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-26334/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/120.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "date": "2023-07-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "date": "2022-04-12T09:15:14.880000",
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28480"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-26334"
      },
      {
        "date": "2023-07-24T08:22:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      },
      {
        "date": "2024-11-21T06:53:46.077000",
        "db": "NVD",
        "id": "CVE-2022-26334"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Classic buffer overflow vulnerability in multiple Siemens products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-008107"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3135"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202204-0495

    Vulnerability from variot - Updated: 2024-11-23 21:32

    A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server of the affected device could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. plural SCALANCE The product contains a cross-site request forgery vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202204-0495",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xr324-4m eec",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-4m poe ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance xr324-12m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310fe",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "lt",
        "trust": 1.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-2eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x302-7eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x307-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x310",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance x320-1-2ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x408-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "siplus net scalance x308-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance x304-2fe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-2eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh+",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2lh",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x306-1ldfe",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x302-7eec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance fe",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x320-1\u003c4.1.4"
      },
      {
        "model": "scalance x320-1-2ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x408-2\u003c4.1.4"
      },
      {
        "model": "siplus net scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-3\u003c4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x307-2\u003c4.1.4"
      },
      {
        "model": "scalance x306-1ld fe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance eec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x302-7\u003c4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x310\u003c4.1.4"
      },
      {
        "model": "scalance x308-2m poe",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      },
      {
        "model": "scalance",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x308-2\u003c4.1.4"
      },
      {
        "model": "scalance x308-2lh+",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "4.1.4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michael Messner and Abian Blome of Siemens Energy coordinated the disclosure of CVE-2022-25751 and CVE-2022-25756 to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-25754",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2022-25754",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2022-28483",
            "impactScore": 9.2,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2022-25754",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-25754",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-25754",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-25754",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-28483",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202204-3139",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-25754",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server of the affected device could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. plural  SCALANCE The product contains a cross-site request forgery vulnerability.Information is obtained, information is tampered with, and service is disrupted  (DoS) It may be put into a state. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). SIPLUS extreme is designed for reliable operation under extreme conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-25754",
        "trust": 3.9
      },
      {
        "db": "SIEMENS",
        "id": "SSA-836527",
        "trust": 2.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-22-104-09",
        "trust": 1.5
      },
      {
        "db": "JVN",
        "id": "JVNVU91165555",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "id": "VAR-202204-0495",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      }
    ],
    "trust": 1.2916554666666666
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:32:37.343000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-836527",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "title": "Patch for Siemens SCALANCE X-300 Switch Family Devices Cross-Site Request Forgery Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/329316"
      },
      {
        "title": "Multiple  Siemens Repair measures for product cross-site request forgery vulnerability",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=190129"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-352",
        "trust": 1.0
      },
      {
        "problemtype": "Cross-site request forgery (CWE-352) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf"
      },
      {
        "trust": 0.9,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu91165555/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-25754"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-25754/"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-104-09"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/352.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "date": "2022-04-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "date": "2022-04-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "date": "2022-04-12T09:15:14.747000",
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-04-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-28483"
      },
      {
        "date": "2022-04-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-25754"
      },
      {
        "date": "2022-04-26T09:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      },
      {
        "date": "2022-04-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      },
      {
        "date": "2024-11-21T06:52:56.263000",
        "db": "NVD",
        "id": "CVE-2022-25754"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0SCALANCE\u00a0 Cross-site request forgery vulnerability in product",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001595"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "cross-site request forgery",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202204-3139"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202101-0486

    Vulnerability from variot - Updated: 2024-11-23 20:47

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202101-0486",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xp216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb213-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt siplus net",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc216-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc208g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf202-2p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc208g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x308-2m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2g poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xp208 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x201-3pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xb208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xp216poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x202-2irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x320-3ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xb213-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204 dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x204irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x201-3pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x-200irt switch family",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance switch family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x-200"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Siemens ProductCERT reported these vulnerabilities to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-28391",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2020-28391",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 9.4,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2021-02593",
            "impactScore": 9.2,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2020-28391",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 5.9,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2020-28391",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-28391",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-28391",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2021-02593",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202101-834",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2020-28391",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-200RNA switch family (All versions \u003c V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-28391",
        "trust": 3.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-012-02",
        "trust": 2.5
      },
      {
        "db": "SIEMENS",
        "id": "SSA-274900",
        "trust": 2.3
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.0124",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "id": "VAR-202101-0486",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      }
    ],
    "trust": 1.2641418511111109
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      }
    ]
  },
  "last_update_date": "2024-11-23T20:47:39.963000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-274900",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf"
      },
      {
        "title": "Patch for Scalance X Products hard-coded encryption key vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/244015"
      },
      {
        "title": "Multiple Siemens Product security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=139506"
      },
      {
        "title": "Siemens Security Advisories: Siemens Security Advisory",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=16f5b7ec974eee0b50172f47db7b7ec5"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-798",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-321",
        "trust": 1.0
      },
      {
        "problemtype": "Using hardcoded credentials (CWE-798) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.1,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-02"
      },
      {
        "trust": 2.3,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-274900.pdf"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-28391"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.0124/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/321.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-012-02"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "date": "2021-01-12T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "date": "2021-10-01T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "date": "2021-01-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "date": "2021-01-12T21:15:18.120000",
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-02-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02593"
      },
      {
        "date": "2022-12-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2020-28391"
      },
      {
        "date": "2021-10-01T08:04:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      },
      {
        "date": "2022-12-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      },
      {
        "date": "2024-11-21T05:22:42.433000",
        "db": "NVD",
        "id": "CVE-2020-28391"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "SCALANCE\u00a0X-200\u00a0 and \u00a0SCALANCE\u00a0X-200IRT\u00a0 Vulnerability in using hard-coded credentials in switch families",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015531"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "trust management problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-834"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202101-0139

    Vulnerability from variot - Updated: 2024-11-23 20:33

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily. SCALANCE X-200 and SCALANCE X-200IRT An out-of-bounds write vulnerability exists in the switch family.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202101-0139",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xp216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb213-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt siplus net",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc216-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc208g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf202-2p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc208g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x308-2m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2g poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xp208 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x201-3pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xb208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xp216poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x202-2irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x320-3ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xb213-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204 dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x204irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x201-3pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x-200irt switch family",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance switch family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x-200"
      },
      {
        "model": "scalance switch family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x-300x408\u003cv4.1.0"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Siemens reported these vulnerabilities to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-15800",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2020-15800",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2021-02595",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2020-15800",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2020-15800",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-15800",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-15800",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2021-02595",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202101-915",
            "trust": 0.6,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions \u003c V4.1.0). The webserver of the affected devices contains a vulnerability that may lead to a heap overflow condition. An attacker could cause this condition on the webserver by sending specially crafted requests. This could stop the webserver temporarily. SCALANCE X-200 and SCALANCE X-200IRT An out-of-bounds write vulnerability exists in the switch family.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-15800",
        "trust": 3.0
      },
      {
        "db": "SIEMENS",
        "id": "SSA-139628",
        "trust": 2.2
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595",
        "trust": 0.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-012-05",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.0127",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "id": "VAR-202101-0139",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      }
    ],
    "trust": 1.2641418511111109
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      }
    ]
  },
  "last_update_date": "2024-11-23T20:33:26.845000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-139628",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "title": "Patch for Scalance X Products heap buffer overflow vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/244021"
      },
      {
        "title": "Siemens SCALANCE X-200IRT Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=138843"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-122",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      },
      {
        "problemtype": "Out-of-bounds writing (CWE-787) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-15800"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-05"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.0127/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "date": "2021-10-01T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "date": "2021-01-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "date": "2021-01-12T21:15:16.480000",
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-02-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02595"
      },
      {
        "date": "2021-10-01T08:52:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      },
      {
        "date": "2021-09-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      },
      {
        "date": "2024-11-21T05:06:12.450000",
        "db": "NVD",
        "id": "CVE-2020-15800"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "SCALANCE\u00a0X-200\u00a0 and \u00a0SCALANCE\u00a0X-200IRT\u00a0 Out-of-bounds write vulnerability in switch family",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015534"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-915"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202101-0138

    Vulnerability from variot - Updated: 2024-11-23 19:39

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products. SCALANCE X-200 and SCALANCE X-200IRT A vulnerability exists in the switch family regarding the lack of authentication for critical features.Denial of service (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202101-0138",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xp216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb213-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt siplus net",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc216-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc208g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf202-2p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc208g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x308-2m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2g poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xp208 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x201-3pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xb208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xp216poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x202-2irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x320-3ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xb213-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204 dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x201-3pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x200-4pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x204irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x-200irt switch family",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance switch family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x-200"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Siemens reported these vulnerabilities to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-15799",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2020-15799",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2021-02596",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 2.8,
            "id": "CVE-2020-15799",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 6.5,
            "baseSeverity": "Medium",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2020-15799",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-15799",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-15799",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2021-02596",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202101-856",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products. SCALANCE X-200 and SCALANCE X-200IRT A vulnerability exists in the switch family regarding the lack of authentication for critical features.Denial of service (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-15799",
        "trust": 3.0
      },
      {
        "db": "SIEMENS",
        "id": "SSA-139628",
        "trust": 2.2
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596",
        "trust": 0.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-012-05",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.0127",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "id": "VAR-202101-0138",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      }
    ],
    "trust": 1.2641418511111109
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      }
    ]
  },
  "last_update_date": "2024-11-23T19:39:47.719000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-139628",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "title": "Patch for Scalance X Products key function certification missing vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/244024"
      },
      {
        "title": "Multiple  Siemens SCALANCE Fixes for access control error vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139366"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-306",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of authentication for important features (CWE-306) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-15799"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-05"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.0127/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "date": "2021-10-04T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "date": "2021-01-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "date": "2021-01-12T21:15:16.370000",
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-02-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02596"
      },
      {
        "date": "2021-10-04T05:21:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      },
      {
        "date": "2021-09-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      },
      {
        "date": "2024-11-21T05:06:12.267000",
        "db": "NVD",
        "id": "CVE-2020-15799"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "SCALANCE\u00a0X-200\u00a0 and \u00a0SCALANCE\u00a0X-200IRT\u00a0 Vulnerability in lack of authentication for critical features in the switch family",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015540"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "access control error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-856"
      }
    ],
    "trust": 0.6
  }
}

    VAR-202101-0304

    Vulnerability from variot - Updated: 2024-11-23 19:30

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore. SCALANCE X-200 and SCALANCE X-200IRT An out-of-bounds write vulnerability exists in the switch family.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202101-0304",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "scalance xp216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb213-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt siplus net",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc216-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf201-3p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xc208g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xf202-2p irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh\\+",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc208g poe",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x308-2m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2g poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2lh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x310fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xp208 \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x201-3pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x204irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xb208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x202-2pirt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance xp216poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb205-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance x202-2irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.5.0"
      },
      {
        "model": "scalance x320-3ldfe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216-4c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc216eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x307-3ld",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xb213-3ld",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204 dna",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf206-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2ba irt",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc206-2sfp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf208",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xp208poe eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x308-2m ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc216-4c g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xb216",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc208g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xf204-2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x320-1fe",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "scalance xc206-2sfp g eec",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance xc224-4c g \\",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.2.5"
      },
      {
        "model": "scalance x200-4pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net scalance x202-2pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x204irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x307-3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x201-3pirt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x202-2irt",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x308-2ld",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "scalance x-200irt switch family",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "scalance switch family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "x-200"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Siemens reported these vulnerabilities to CISA.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2020-25226",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2020-25226",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2021-02594",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2020-25226",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2020-25226",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-25226",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2020-25226",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2021-02594",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202101-917",
            "trust": 0.6,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions \u003c V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions \u003c V5.5.0). The web server of the affected devices contains a vulnerability that may lead to a buffer overflow condition. An attacker could cause this condition on the webserver by sending a specially crafted request. The webserver could stop and not recover anymore. SCALANCE X-200 and SCALANCE X-200IRT An out-of-bounds write vulnerability exists in the switch family.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. SCALANCE X is a switch used to connect industrial components, such as programmable logic controllers (plc) or human machine interfaces (HMIs)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-25226",
        "trust": 3.0
      },
      {
        "db": "SIEMENS",
        "id": "SSA-139628",
        "trust": 2.2
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594",
        "trust": 0.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-012-05",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.0127",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "id": "VAR-202101-0304",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      }
    ],
    "trust": 1.264141851111111
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      }
    ]
  },
  "last_update_date": "2024-11-23T19:30:05.728000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SSA-139628",
        "trust": 0.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "title": "Patch for Scalance X Products heap buffer overflow vulnerability (CNVD-2021-02594)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/244018"
      },
      {
        "title": "Multiple Siemens Product Buffer Error Vulnerability Fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139392"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-122",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      },
      {
        "problemtype": "Out-of-bounds writing (CWE-787) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-25226"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-05"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.0127/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "date": "2021-10-01T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "date": "2021-01-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "date": "2021-01-12T21:15:16.543000",
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-02-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2021-02594"
      },
      {
        "date": "2021-10-01T08:45:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      },
      {
        "date": "2021-09-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      },
      {
        "date": "2024-11-21T05:17:42.257000",
        "db": "NVD",
        "id": "CVE-2020-25226"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "SCALANCE\u00a0X-200\u00a0 and \u00a0SCALANCE\u00a0X-200IRT\u00a0 Out-of-bounds write vulnerability in switch family",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-015533"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202101-917"
      }
    ],
    "trust": 0.6
  }
}