← CVE Intelligence

CVE-2022-26649

Siemens / SCALANCE X200-4P IRT PUBLISHED

Description (CNA)

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.

Affected (CNA)

Vendor / productVersions
Siemens / SCALANCE X200-4P IRTaffected All versions < V5.5.2
Siemens / SCALANCE X201-3P IRTaffected All versions < V5.5.2
Siemens / SCALANCE X201-3P IRT PROaffected All versions < V5.5.2
Siemens / SCALANCE X202-2IRTaffected All versions < V5.5.2
Siemens / SCALANCE X202-2IRTaffected All versions < V5.5.2
Siemens / SCALANCE X202-2P IRTaffected All versions < V5.5.2
Siemens / SCALANCE X202-2P IRT PROaffected All versions < V5.5.2
Siemens / SCALANCE X204-2affected All versions < V5.2.6
Siemens / SCALANCE X204-2FMaffected All versions < V5.2.6
Siemens / SCALANCE X204-2LDaffected All versions < V5.2.6
Siemens / SCALANCE X204-2LD TSaffected All versions < V5.2.6
Siemens / SCALANCE X204-2TSaffected All versions < V5.2.6
Siemens / SCALANCE X204IRTaffected All versions < V5.5.2
Siemens / SCALANCE X204IRTaffected All versions < V5.5.2
Siemens / SCALANCE X204IRT PROaffected All versions < V5.5.2
Siemens / SCALANCE X206-1affected All versions < V5.2.6
Siemens / SCALANCE X206-1LDaffected All versions < V5.2.6
Siemens / SCALANCE X208affected All versions < V5.2.6
Siemens / SCALANCE X208PROaffected All versions < V5.2.6
Siemens / SCALANCE X212-2affected All versions < V5.2.6
Siemens / SCALANCE X212-2LDaffected All versions < V5.2.6
Siemens / SCALANCE X216affected All versions < V5.2.6
Siemens / SCALANCE X224affected All versions < V5.2.6
Siemens / SCALANCE XF201-3P IRTaffected All versions < V5.5.2
Siemens / SCALANCE XF202-2P IRTaffected All versions < V5.5.2
Siemens / SCALANCE XF204affected All versions < V5.2.6
Siemens / SCALANCE XF204-2affected All versions < V5.2.6
Siemens / SCALANCE XF204-2BA IRTaffected All versions < V5.5.2
Siemens / SCALANCE XF204IRTaffected All versions < V5.5.2
Siemens / SCALANCE XF206-1affected All versions < V5.2.6
Siemens / SCALANCE XF208affected All versions < V5.2.6

CWE

CWE-120

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.