CVE-2022-25753

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-25753
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf Mitigation Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:*
History

19 Apr 2022, 18:11

Type Values Removed Values Added
CPE cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : 6.5
v3 : 8.8
First Time Siemens scalance X308-2lh\+ Firmware
Siemens
Siemens scalance Xr324-12m Ts Firmware
Siemens scalance X308-2m Poe
Siemens scalance X307-3ld Firmware
Siemens scalance X302-7eec
Siemens siplus Net Scalance X308-2 Firmware
Siemens scalance X308-2m Firmware
Siemens scalance Xr324-12m
Siemens scalance Xr324-4m Eec Firmware
Siemens scalance X307-2eec
Siemens scalance X308-2m Ts
Siemens scalance X308-2lh\+
Siemens scalance X408-2
Siemens scalance X308-2ld
Siemens scalance X304-2fe
Siemens scalance Xr324-4m Poe Ts
Siemens scalance X320-1fe
Siemens scalance X308-2m Ts Firmware
Siemens scalance X308-2m Poe Firmware
Siemens scalance X308-2m
Siemens scalance X308-2lh Firmware
Siemens scalance X320-1-2ldfe Firmware
Siemens scalance X320-1-2ldfe
Siemens scalance X307-3
Siemens scalance X310fe
Siemens scalance Xr324-4m Poe Ts Firmware
Siemens scalance X308-2 Firmware
Siemens scalance X308-2ld Firmware
Siemens scalance X306-1ldfe Firmware
Siemens scalance X310 Firmware
Siemens scalance X307-3 Firmware
Siemens scalance Xr324-12m Firmware
Siemens scalance X308-2
Siemens scalance Xr324-12m Ts
Siemens scalance Xr324-4m Poe
Siemens scalance X408-2 Firmware
Siemens scalance Xr324-4m Poe Firmware
Siemens scalance X307-3ld
Siemens scalance X310fe Firmware
Siemens scalance X302-7eec Firmware
Siemens scalance X306-1ldfe
Siemens scalance X308-2lh
Siemens scalance X310
Siemens scalance Xr324-4m Eec
Siemens scalance X307-2eec Firmware
Siemens scalance X320-1fe Firmware
Siemens scalance X304-2fe Firmware
Siemens siplus Net Scalance X308-2
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf - Mitigation, Patch, Vendor Advisory

12 Apr 2022, 09:39

Type Values Removed Values Added
New CVE
Information

Published : 2022-04-12 09:15

Updated : 2023-12-10 14:22

NVD link : CVE-2022-25753

Mitre link : CVE-2022-25753

CVE.ORG link : CVE-2022-25753

JSON object : View

Products Affected

siemens

  • scalance_x310fe
  • scalance_x308-2_firmware
  • scalance_x307-3_firmware
  • scalance_x408-2_firmware
  • scalance_x308-2lh
  • scalance_xr324-4m_eec
  • scalance_x307-3
  • scalance_x308-2ld
  • scalance_x308-2
  • scalance_x308-2m
  • siplus_net_scalance_x308-2_firmware
  • scalance_x320-1-2ldfe_firmware
  • scalance_xr324-4m_poe
  • scalance_x310_firmware
  • scalance_x307-2eec
  • scalance_x307-3ld
  • scalance_x308-2lh_firmware
  • scalance_x320-1fe_firmware
  • scalance_x308-2m_ts
  • scalance_x408-2
  • scalance_xr324-4m_eec_firmware
  • scalance_xr324-4m_poe_ts_firmware
  • scalance_xr324-12m_firmware
  • scalance_x304-2fe
  • scalance_x308-2m_poe
  • scalance_xr324-4m_poe_firmware
  • scalance_x320-1fe
  • scalance_x302-7eec
  • scalance_x302-7eec_firmware
  • scalance_x308-2ld_firmware
  • scalance_x308-2lh\+_firmware
  • scalance_x308-2lh\+
  • siplus_net_scalance_x308-2
  • scalance_x307-2eec_firmware
  • scalance_x306-1ldfe
  • scalance_xr324-4m_poe_ts
  • scalance_xr324-12m_ts_firmware
  • scalance_x310
  • scalance_xr324-12m
  • scalance_x310fe_firmware
  • scalance_x308-2m_poe_firmware
  • scalance_x307-3ld_firmware
  • scalance_x308-2m_ts_firmware
  • scalance_x320-1-2ldfe
  • scalance_xr324-12m_ts
  • scalance_x306-1ldfe_firmware
  • scalance_x308-2m_firmware
  • scalance_x304-2fe_firmware
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow