PT-2022-3571 · Siemens · Scalance X310+14

Publicado 2022-04-12 · Atualizado 2022-04-19 · CVE-2022-25753

Positive Technologies (AI Summary) · Pt

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

SCALANCE X302-7 EEC (230 V)

SCALANCE X302-7 EEC (230 V, revestido)

SCALANCE X302-7 EEC (24 V)

SCALANCE X302-7 EEC (24 V, revestido)

SCALANCE X302-7 EEC (2x 230 V)

SCALANCE X302-7 EEC (2x 230 V, revestido)

SCALANCE X302-7 EEC (2x 24 V)

SCALANCE X302-7 EEC (2x 24 V, revestido)

SCALANCE X304-2FE

SCALANCE X306-1LD FE

SCALANCE X307-2 EEC (230 V)

SCALANCE X307-2 EEC (230 V, revestido)

SCALANCE X307-2 EEC (24 V)

SCALANCE X307-2 EEC (24 V, revestido)

SCALANCE X307-2 EEC (2x 230 V)

SCALANCE X307-2 EEC (2x 230 V, revestido)

SCALANCE X307-2 EEC (2x 24 V)

SCALANCE X307-2 EEC (2x 24 V, revestido)

SCALANCE X307-3

SCALANCE X307-3LD

SCALANCE X308-2

SCALANCE X308-2LD

SCALANCE X308-2LH

SCALANCE X308-2LH+

SCALANCE X308-2M

SCALANCE X308-2M PoE

SCALANCE X308-2M TS

SCALANCE X310

SCALANCE X310FE

SCALANCE X320-1 FE

SCALANCE X408-2

SCALANCE XR324-12M (230 V, portas na parte frontal)

SCALANCE XR324-12M (230 V, portas na parte traseira)

SCALANCE XR324-12M (24 V, portas na parte frontal)

SCALANCE XR324-12M (24 V, portas na parte traseira)

SCALANCE XR324-12M TS (24 V)

SCALANCE XR324-4M EEC (100-240 VCA/60-250 VCC, portas na parte frontal)

SCALANCE XR324-4M EEC (100-240 VCA/60-250 VCC, portas na parte traseira)

SCALANCE XR324-4M EEC (24 V, portas na parte frontal)

SCALANCE XR324-4M EEC (24 V, portas na parte traseira)

SCALANCE XR324-4M EEC (2x 100-240 VCA/60-250 VCC, portas na parte frontal)

SCALANCE XR324-4M EEC (2x 100-240 VCA/60-250 VCC, portas na parte traseira)

SCALANCE XR324-4M EEC (2x 24 V, portas na parte frontal)

SCALANCE XR324-4M EEC (2x 24 V, portas na parte traseira)

Memory Corruption

Stack Overflow

Enumeração de Fraquezas

CWE-787

CWE-121

Identificadores relacionados

BDU:2022-04355

CVE-2022-25753

Produtos afetados

Scalance X302-7 Eec

Scalance X304-2Fe

Scalance X306-1Ld Fe

Scalance X307-2 Eec

Scalance X307-3Ld

Scalance X308-2

Scalance X308-2M

Scalance X308-2M Poe

Scalance X310

Scalance X320-1 Fe

Scalance X408-2

Scalance Xr324-12M

Scalance Xr324-4M Eec

Scalance Xr324-4M Poe

Siplus Net Scalance X308-2

Referências · 5

• https://bdu.fstec.ru/vul/2022-04355 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2022-25753 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-25753 · Aviso do Fabricante
• https://t.me/cibsecurity/40601 · Publicação no Telegram
• https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf · Aviso do Fabricante