CVE-2022-26334
- State
- Published
- Severity
- Not scored
- Published
- Apr 12, 2022
- Updated
- Aug 3, 2024
- Reserved
- Mar 1, 2022
Description
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.
Scores
The record has no CVSS score.
Weaknesses
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Products
| Product | Versions |
|---|---|
SCALANCE X302-7 EEC (230V)Siemens |
|
SCALANCE X302-7 EEC (230V, coated)Siemens |
|
SCALANCE X302-7 EEC (24V)Siemens |
|
SCALANCE X302-7 EEC (24V, coated)Siemens |
|
SCALANCE X302-7 EEC (2x 230V)Siemens |
|
SCALANCE X302-7 EEC (2x 230V, coated)Siemens |
|
SCALANCE X302-7 EEC (2x 24V)Siemens |
|
SCALANCE X302-7 EEC (2x 24V, coated)Siemens |
|
SCALANCE X304-2FESiemens |
|
SCALANCE X306-1LD FESiemens |
|
SCALANCE X307-2 EEC (230V)Siemens |
|
SCALANCE X307-2 EEC (230V, coated)Siemens |
|
SCALANCE X307-2 EEC (24V)Siemens |
|
SCALANCE X307-2 EEC (24V, coated)Siemens |
|
SCALANCE X307-2 EEC (2x 230V)Siemens |
|
SCALANCE X307-2 EEC (2x 230V, coated)Siemens |
|
SCALANCE X307-2 EEC (2x 24V)Siemens |
|
SCALANCE X307-2 EEC (2x 24V, coated)Siemens |
|
SCALANCE X307-3Siemens |
|
SCALANCE X307-3Siemens |
|
SCALANCE X307-3LDSiemens |
|
SCALANCE X307-3LDSiemens |
|
SCALANCE X308-2Siemens |
|
SCALANCE X308-2Siemens |
|
SCALANCE X308-2LDSiemens |
|
SCALANCE X308-2LDSiemens |
|
SCALANCE X308-2LHSiemens |
|
SCALANCE X308-2LHSiemens |
|
SCALANCE X308-2LH+Siemens |
|
SCALANCE X308-2LH+Siemens |
|
SCALANCE X308-2MSiemens |
|
SCALANCE X308-2MSiemens |
|
SCALANCE X308-2M PoESiemens |
|
SCALANCE X308-2M PoESiemens |
|
SCALANCE X308-2M TSSiemens |
|
SCALANCE X308-2M TSSiemens |
|
SCALANCE X310Siemens |
|
SCALANCE X310Siemens |
|
SCALANCE X310FESiemens |
|
SCALANCE X310FESiemens |
|
SCALANCE X320-1 FESiemens |
|
SCALANCE X320-1-2LD FESiemens |
|
SCALANCE X408-2Siemens |
|
SCALANCE XR324-12M (230V, ports on front)Siemens |
|
SCALANCE XR324-12M (230V, ports on front)Siemens |
|
SCALANCE XR324-12M (230V, ports on rear)Siemens |
|
SCALANCE XR324-12M (230V, ports on rear)Siemens |
|
SCALANCE XR324-12M (24V, ports on front)Siemens |
|
SCALANCE XR324-12M (24V, ports on front)Siemens |
|
SCALANCE XR324-12M (24V, ports on rear)Siemens |
|
SCALANCE XR324-12M (24V, ports on rear)Siemens |
|
SCALANCE XR324-12M TS (24V)Siemens |
|
SCALANCE XR324-12M TS (24V)Siemens |
|
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (24V, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (24V, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens |
|
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens |
|
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens |
|
SCALANCE XR324-4M PoE (230V, ports on front)Siemens |
|
SCALANCE XR324-4M PoE (230V, ports on rear)Siemens |
|
SCALANCE XR324-4M PoE (24V, ports on front)Siemens |
|
SCALANCE XR324-4M PoE (24V, ports on rear)Siemens |
|
SCALANCE XR324-4M PoE TS (24V, ports on front)Siemens |
|
SIPLUS NET SCALANCE X308-2Siemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.