cnvd - cnvd-2022-51439

cnvd-2022-51439

Vulnerability from cnvd

Title: Siemens SCALANCE X Switches缓冲区溢出漏洞

Description:

Siemens SCALANCE X Switches是德国西门子(Siemens)公司的一款工业以太网交换机产品。

Siemens SCALANCE X Switches存在缓冲区溢出漏洞，未经身份验证的攻击者可利用该漏洞使受影响的设备崩溃。

Severity: 高

Patch Name: Siemens SCALANCE X Switches缓冲区溢出漏洞的补丁

Patch Description:

Siemens SCALANCE X Switches是德国西门子(Siemens)公司的一款工业以太网交换机产品。

Siemens SCALANCE X Switches存在缓冲区溢出漏洞，未经身份验证的攻击者可利用该漏洞使受影响的设备崩溃。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-310038.html

Reference: https://cert-portal.siemens.com/productcert/html/ssa-310038.html

Impacted products

Name
['Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)', 'Siemens SCALANCE X200-4P IRT (6GK5200-4AH10-2BA3)', 'Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)', 'Siemens SCALANCE X201-3P IRT (6GK5201-3BH10-2BA3)', 'Siemens SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2)', 'Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR10-2BA6)', 'Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)', 'Siemens SCALANCE X202-2IRT (6GK5202-2BB10-2BA3)', 'Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)', 'Siemens SCALANCE X202-2P IRT (6GK5202-2BH10-2BA3)', 'Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)', 'Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR10-2BA6)', 'Siemens SCALANCE X204-2 (6GK5204-2BB10-2AA3) <5.2.6', 'Siemens SCALANCE X204-2FM (6GK5204-2BB11-2AA3) <5.2.6', 'Siemens SCALANCE X204-2LD (6GK5204-2BC10-2AA3) <5.2.6', 'Siemens SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) <5.2.6', 'Siemens SCALANCE X204-2TS (6GK5204-2BB10-2CA2) <5.2.6', 'Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3)', 'Siemens SCALANCE X204IRT (6GK5204-0BA10-2BA3)', 'Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)', 'Siemens SCALANCE X204IRT PRO (6GK5204-0JA10-2BA6)', 'Siemens SCALANCE X206-1 (6GK5206-1BB10-2AA3) <5.2.6', 'Siemens SCALANCE X206-1LD (6GK5206-1BC10-2AA3) <5.2.6', 'Siemens SCALANCE X208 (6GK5208-0BA10-2AA3) <5.2.6', 'Siemens SCALANCE X208PRO (6GK5208-0HA10-2AA6) <5.2.6', 'Siemens SCALANCE X212-2 (6GK5212-2BB00-2AA3) <5.2.6', 'Siemens SCALANCE X212-2LD (6GK5212-2BC00-2AA3) <5.2.6', 'Siemens SCALANCE X216 (6GK5216-0BA00-2AA3) <5.2.6', 'Siemens SCALANCE X224 (6GK5224-0BA00-2AA3) <5.2.6', 'Siemens SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6)', 'Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)', 'Siemens SCALANCE XF204 (6GK5204-0BA00-2AF2) <5.2.6', 'Siemens SCALANCE XF204-2 (6GK5204-2BC00-2AF2) <5.2.6', 'Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)', 'Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2)', 'Siemens SCALANCE XF204IRT (6GK5204-0BA10-2BF2)', 'Siemens SCALANCE XF206-1 (6GK5206-1BC00-2AF2) <5.2.6', 'Siemens SCALANCE XF208 (6GK5208-0BA00-2AF2) <5.2.6']

Name

['Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)', 'Siemens SCALANCE X200-4P IRT (6GK5200-4AH10-2BA3)', 'Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)', 'Siemens SCALANCE X201-3P IRT (6GK5201-3BH10-2BA3)', 'Siemens SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2)', 'Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR10-2BA6)', 'Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)', 'Siemens SCALANCE X202-2IRT (6GK5202-2BB10-2BA3)', 'Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)', 'Siemens SCALANCE X202-2P IRT (6GK5202-2BH10-2BA3)', 'Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)', 'Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR10-2BA6)', 'Siemens SCALANCE X204-2 (6GK5204-2BB10-2AA3) <5.2.6', 'Siemens SCALANCE X204-2FM (6GK5204-2BB11-2AA3) <5.2.6', 'Siemens SCALANCE X204-2LD (6GK5204-2BC10-2AA3) <5.2.6', 'Siemens SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) <5.2.6', 'Siemens SCALANCE X204-2TS (6GK5204-2BB10-2CA2) <5.2.6', 'Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3)', 'Siemens SCALANCE X204IRT (6GK5204-0BA10-2BA3)', 'Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)', 'Siemens SCALANCE X204IRT PRO (6GK5204-0JA10-2BA6)', 'Siemens SCALANCE X206-1 (6GK5206-1BB10-2AA3) <5.2.6', 'Siemens SCALANCE X206-1LD (6GK5206-1BC10-2AA3) <5.2.6', 'Siemens SCALANCE X208 (6GK5208-0BA10-2AA3) <5.2.6', 'Siemens SCALANCE X208PRO (6GK5208-0HA10-2AA6) <5.2.6', 'Siemens SCALANCE X212-2 (6GK5212-2BB00-2AA3) <5.2.6', 'Siemens SCALANCE X212-2LD (6GK5212-2BC00-2AA3) <5.2.6', 'Siemens SCALANCE X216 (6GK5216-0BA00-2AA3) <5.2.6', 'Siemens SCALANCE X224 (6GK5224-0BA00-2AA3) <5.2.6', 'Siemens SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6)', 'Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)', 'Siemens SCALANCE XF204 (6GK5204-0BA00-2AF2) <5.2.6', 'Siemens SCALANCE XF204-2 (6GK5204-2BC00-2AF2) <5.2.6', 'Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)', 'Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2)', 'Siemens SCALANCE XF204IRT (6GK5204-0BA10-2BF2)', 'Siemens SCALANCE XF206-1 (6GK5206-1BC00-2AF2) <5.2.6', 'Siemens SCALANCE XF208 (6GK5208-0BA00-2AF2) <5.2.6']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-26648"
    }
  },
  "description": "Siemens SCALANCE X Switches\u662f\u5fb7\u56fd\u897f\u95e8\u5b50(Siemens)\u516c\u53f8\u7684\u4e00\u6b3e\u5de5\u4e1a\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u4ea7\u54c1\u3002\n\nSiemens SCALANCE X Switches\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5d29\u6e83\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-310038.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-51439",
  "openTime": "2022-07-14",
  "patchDescription": "Siemens SCALANCE X Switches\u662f\u5fb7\u56fd\u897f\u95e8\u5b50(Siemens)\u516c\u53f8\u7684\u4e00\u6b3e\u5de5\u4e1a\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u4ea7\u54c1\u3002\r\n\r\nSiemens SCALANCE X Switches\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5d29\u6e83\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SCALANCE X Switches\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)",
      "Siemens SCALANCE X200-4P IRT (6GK5200-4AH10-2BA3)",
      "Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)",
      "Siemens SCALANCE X201-3P IRT (6GK5201-3BH10-2BA3)",
      "Siemens SCALANCE X201-3P IRT PRO (6GK5201-3BH00-2BD2)",
      "Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR10-2BA6)",
      "Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3)",
      "Siemens SCALANCE X202-2IRT (6GK5202-2BB10-2BA3)",
      "Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)",
      "Siemens SCALANCE X202-2P IRT (6GK5202-2BH10-2BA3)",
      "Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)",
      "Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR10-2BA6)",
      "Siemens SCALANCE X204-2 (6GK5204-2BB10-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X204-2FM (6GK5204-2BB11-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X204-2LD (6GK5204-2BC10-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) \u003c5.2.6",
      "Siemens SCALANCE X204-2TS (6GK5204-2BB10-2CA2) \u003c5.2.6",
      "Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3)",
      "Siemens SCALANCE X204IRT (6GK5204-0BA10-2BA3)",
      "Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)",
      "Siemens SCALANCE X204IRT PRO (6GK5204-0JA10-2BA6)",
      "Siemens SCALANCE X206-1 (6GK5206-1BB10-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X206-1LD (6GK5206-1BC10-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X208 (6GK5208-0BA10-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X208PRO (6GK5208-0HA10-2AA6) \u003c5.2.6",
      "Siemens SCALANCE X212-2 (6GK5212-2BB00-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X212-2LD (6GK5212-2BC00-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X216 (6GK5216-0BA00-2AA3) \u003c5.2.6",
      "Siemens SCALANCE X224 (6GK5224-0BA00-2AA3) \u003c5.2.6",
      "Siemens SCALANCE XF201-3P IRT (6GK5201-3JR00-2BA6)",
      "Siemens SCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)",
      "Siemens SCALANCE XF204 (6GK5204-0BA00-2AF2) \u003c5.2.6",
      "Siemens SCALANCE XF204-2 (6GK5204-2BC00-2AF2) \u003c5.2.6",
      "Siemens SCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)",
      "Siemens SCALANCE XF204IRT (6GK5204-0BA00-2BF2)",
      "Siemens SCALANCE XF204IRT (6GK5204-0BA10-2BF2)",
      "Siemens SCALANCE XF206-1 (6GK5206-1BC00-2AF2) \u003c5.2.6",
      "Siemens SCALANCE XF208 (6GK5208-0BA00-2AF2) \u003c5.2.6"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-310038.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-07-14",
  "title": "Siemens SCALANCE X Switches\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2022-26648 (GCVE-0-2022-26648)

Vulnerability from cvelistv5

Published

2022-07-12 10:06

Modified

2025-04-21 13:52

Severity ?

8.2 (High) - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H/E:P/RL:O/RC:C

CWE

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Summary

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf

Impacted products

Vendor

Product

Version

▼

Siemens

SCALANCE X200-4P IRT

Version: All versions < V5.5.2

Siemens	SCALANCE X201-3P IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X201-3P IRT PRO	Version: All versions < V5.5.2
Siemens	SCALANCE X202-2IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X202-2IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X202-2P IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X202-2P IRT PRO	Version: All versions < V5.5.2
Siemens	SCALANCE X204-2	Version: All versions < V5.2.6
Siemens	SCALANCE X204-2FM	Version: All versions < V5.2.6
Siemens	SCALANCE X204-2LD	Version: All versions < V5.2.6
Siemens	SCALANCE X204-2LD TS	Version: All versions < V5.2.6
Siemens	SCALANCE X204-2TS	Version: All versions < V5.2.6
Siemens	SCALANCE X204IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X204IRT	Version: All versions < V5.5.2
Siemens	SCALANCE X204IRT PRO	Version: All versions < V5.5.2
Siemens	SCALANCE X206-1	Version: All versions < V5.2.6
Siemens	SCALANCE X206-1LD	Version: All versions < V5.2.6
Siemens	SCALANCE X208	Version: All versions < V5.2.6
Siemens	SCALANCE X208PRO	Version: All versions < V5.2.6
Siemens	SCALANCE X212-2	Version: All versions < V5.2.6
Siemens	SCALANCE X212-2LD	Version: All versions < V5.2.6
Siemens	SCALANCE X216	Version: All versions < V5.2.6
Siemens	SCALANCE X224	Version: All versions < V5.2.6
Siemens	SCALANCE XF201-3P IRT	Version: All versions < V5.5.2
Siemens	SCALANCE XF202-2P IRT	Version: All versions < V5.5.2
Siemens	SCALANCE XF204	Version: All versions < V5.2.6
Siemens	SCALANCE XF204-2	Version: All versions < V5.2.6
Siemens	SCALANCE XF204-2BA IRT	Version: All versions < V5.5.2
Siemens	SCALANCE XF204IRT	Version: All versions < V5.5.2
Siemens	SCALANCE XF206-1	Version: All versions < V5.2.6
Siemens	SCALANCE XF208	Version: All versions < V5.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:11:43.481Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-26648",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-18T15:15:25.029715Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-21T13:52:07.405Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X200-4P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X201-3P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X201-3P IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X202-2IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X202-2IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X202-2P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X202-2P IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2FM",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2LD TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204-2TS",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X204IRT PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X206-1LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X208PRO",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X212-2LD",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X216",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE X224",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF201-3P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF202-2P IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204-2BA IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF204IRT",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.5.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF206-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SCALANCE XF208",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V5.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \u003c V5.5.2), SCALANCE X201-3P IRT (All versions \u003c V5.5.2), SCALANCE X201-3P IRT PRO (All versions \u003c V5.5.2), SCALANCE X202-2IRT (All versions \u003c V5.5.2), SCALANCE X202-2IRT (All versions \u003c V5.5.2), SCALANCE X202-2P IRT (All versions \u003c V5.5.2), SCALANCE X202-2P IRT PRO (All versions \u003c V5.5.2), SCALANCE X204-2 (All versions \u003c V5.2.6), SCALANCE X204-2FM (All versions \u003c V5.2.6), SCALANCE X204-2LD (All versions \u003c V5.2.6), SCALANCE X204-2LD TS (All versions \u003c V5.2.6), SCALANCE X204-2TS (All versions \u003c V5.2.6), SCALANCE X204IRT (All versions \u003c V5.5.2), SCALANCE X204IRT (All versions \u003c V5.5.2), SCALANCE X204IRT PRO (All versions \u003c V5.5.2), SCALANCE X206-1 (All versions \u003c V5.2.6), SCALANCE X206-1LD (All versions \u003c V5.2.6), SCALANCE X208 (All versions \u003c V5.2.6), SCALANCE X208PRO (All versions \u003c V5.2.6), SCALANCE X212-2 (All versions \u003c V5.2.6), SCALANCE X212-2LD (All versions \u003c V5.2.6), SCALANCE X216 (All versions \u003c V5.2.6), SCALANCE X224 (All versions \u003c V5.2.6), SCALANCE XF201-3P IRT (All versions \u003c V5.5.2), SCALANCE XF202-2P IRT (All versions \u003c V5.5.2), SCALANCE XF204 (All versions \u003c V5.2.6), SCALANCE XF204-2 (All versions \u003c V5.2.6), SCALANCE XF204-2BA IRT (All versions \u003c V5.5.2), SCALANCE XF204IRT (All versions \u003c V5.5.2), SCALANCE XF206-1 (All versions \u003c V5.2.6), SCALANCE XF208 (All versions \u003c V5.2.6). Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-11T09:02:20.560Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-26648",
    "datePublished": "2022-07-12T10:06:34.000Z",
    "dateReserved": "2022-03-07T00:00:00.000Z",
    "dateUpdated": "2025-04-21T13:52:07.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted