CVE-2022-25751 : A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the HTTP headers of incoming requests. This could allow an unauthenticated remote attacker to crash affected devices.

Published 2022-04-12 09:15:15

Updated 2022-04-19 16:39:27

Source Siemens AG

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2022-25751

Siemens » Scalance X408-2 Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X408-2 » Version: N/A
Siemens » Scalance X307-3 Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X307-3 » Version: N/A
Siemens » Scalance X307-3ld Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X307-3ld » Version: N/A
Siemens » Scalance X308-2 Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2 » Version: N/A
Siemens » Scalance X308-2ld Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2ld » Version: N/A
Siemens » Scalance X308-2lh Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2lh » Version: N/A
Siemens » Scalance X308-2lh+ Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2lh+ » Version: N/A
Siemens » Scalance X308-2m Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2m » Version: N/A
Siemens » Scalance X308-2m Ts Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2m Ts » Version: N/A
Siemens » Scalance X310 Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X310 » Version: N/A
Siemens » Scalance X310fe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X310fe » Version: N/A
Siemens » Scalance X320-1fe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X320-1fe » Version: N/A
Siemens » Scalance Xr324-12m Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xr324-12m » Version: N/A
Siemens » Scalance Xr324-12m Ts Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xr324-12m Ts » Version: N/A
Siemens » Scalance Xr324-4m Eec Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xr324-4m Eec » Version: N/A
Siemens » Scalance Xr324-4m Poe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xr324-4m Poe » Version: N/A
Siemens » Scalance Xr324-4m Poe Ts Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xr324-4m Poe Ts » Version: N/A
Siemens » Scalance X302-7eec Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X302-7eec » Version: N/A
Siemens » Scalance X304-2fe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X304-2fe » Version: N/A
Siemens » Scalance X306-1ldfe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X306-1ldfe » Version: N/A
Siemens » Scalance X307-2eec Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X307-2eec » Version: N/A
Siemens » Scalance X308-2m Poe Firmware » Version: N/A
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X308-2m Poe » Version: N/A
Siemens » Scalance X320-1-2ldfe Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X320-1-2ldfe » Version: N/A
Siemens » Siplus Net Scalance X308-2 Firmware
Versions before (<) 4.1.4
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Siplus Net Scalance X308-2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-25751

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-25751

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-25751

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- nvd@nist.gov (Primary)
- productcert@siemens.com (Secondary)

References for CVE-2022-25751

https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf

Mitigation;Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-25751

Products affected by CVE-2022-25751

Exploit prediction scoring system (EPSS) score for CVE-2022-25751

CVSS scores for CVE-2022-25751

CWE ids for CVE-2022-25751

References for CVE-2022-25751