CVE-2022-26647 : A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.

Published 2022-07-12 10:15:10

Updated 2023-04-11 10:15:14

Source Siemens AG

View at NVD, CVE.org

Products affected by CVE-2022-26647

Siemens » Scalance X200-4p Irt Firmware
cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X200-4p Irt » Version: N/A
Siemens » Scalance X201-3p Irt Firmware
cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X201-3p Irt » Version: N/A
Siemens » Scalance X201-3p Irt Pro Firmware
cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X201-3p Irt Pro » Version: N/A
Siemens » Scalance X202-2p Irt Pro Firmware
cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X202-2p Irt Pro » Version: N/A
Siemens » Scalance X204-2 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204-2 » Version: N/A
Siemens » Scalance X204-2fm Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204-2fm » Version: N/A
Siemens » Scalance X204-2ld Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204-2ld » Version: N/A
Siemens » Scalance X204-2ld Ts Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204-2ld Ts » Version: N/A
Siemens » Scalance X204-2ts Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204-2ts » Version: N/A
Siemens » Scalance X206-1 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X206-1 » Version: N/A
Siemens » Scalance X206-1ld Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X206-1ld » Version: N/A
Siemens » Scalance X208 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X208 » Version: N/A
Siemens » Scalance X212-2 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X212-2 » Version: N/A
Siemens » Scalance X212-2ld Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X212-2ld » Version: N/A
Siemens » Scalance X216 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X216 » Version: N/A
Siemens » Scalance X224 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X224 » Version: N/A
Siemens » Scalance Xf201-3p Irt Firmware
cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf201-3p Irt » Version: N/A
Siemens » Scalance Xf202-2p Irt Firmware
cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf202-2p Irt » Version: N/A
Siemens » Scalance Xf204 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf204 » Version: N/A
Siemens » Scalance Xf204-2 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf204-2 » Version: N/A
Siemens » Scalance Xf204-2ba Irt Firmware
cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf204-2ba Irt » Version: N/A
Siemens » Scalance Xf206-1 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf206-1 » Version: N/A
Siemens » Scalance Xf208 Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf208 » Version: N/A
Siemens » Scalance X202-2irt Firmware
cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X202-2irt » Version: N/A
Siemens » Scalance X204irt Firmware
cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204irt » Version: N/A
Siemens » Scalance Xf204irt Firmware
cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance Xf204irt » Version: N/A
Siemens » Scalance X202-2p Irt Firmware
cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X202-2p Irt » Version: N/A
Siemens » Scalance X208 Pro Firmware
Versions before (<) 5.2.6
cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X208 Pro » Version: N/A
Siemens » Scalance X204irt Pro Firmware
cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X204irt Pro » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-26647

EPSS FAQ

0.32%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 71 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-26647

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	Siemens AG
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-26647

CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
Assigned by:
- nvd@nist.gov (Secondary)
- productcert@siemens.com (Primary)

References for CVE-2022-26647

https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf

Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-26647

Products affected by CVE-2022-26647

Exploit prediction scoring system (EPSS) score for CVE-2022-26647

CVSS scores for CVE-2022-26647

CWE ids for CVE-2022-26647

References for CVE-2022-26647