PT-2022-22373 · Siemens · Scalance Sc622-2C+37

Published 2022-07-12 · Updated 2025-01-14 · CVE-2022-34821

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SIMATIC CP 1242-7 V2 (All versions) SIMATIC CP 1243-1 (All versions) SIMATIC CP 1243-7 LTE EU (All versions) SIMATIC CP 1243-7 LTE US (All versions) SIMATIC CP 1243-8 IRC (All versions) SIMATIC CP 1542SP-1 IRC (All versions >= V2.0) SIMATIC CP 1543-1 (All versions < V3.0.22) SIMATIC CP 1543SP-1 (All versions >= V2.0) SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0) SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0) SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0) SIPLUS NET CP 1242-7 V2 (All versions) SIPLUS NET CP 1543-1 (All versions < V3.0.22) SIPLUS S7-1200 CP 1243-1 (All versions) SIPLUS S7-1200 CP 1243-1 RAIL (All versions) RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) SCALANCE M804PB (6GK5804-0AP00-2AA2) SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) SCALANCE M874-2 (6GK5874-2AA00-2AA2) SCALANCE M874-3 (6GK5874-3AA00-2AA2) SCALANCE M876-3 (6GK5876-3AA02-2BA2) SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) SCALANCE M876-4 (6GK5876-4AA10-2BA2) SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) SCALANCE SC622-2C (6GK5622-2GS00-2AC2) SCALANCE SC626-2C (6GK5626-2GS00-2AC2) SCALANCE SC632-2C (6GK5632-2GS00-2AC2) SCALANCE SC636-2C (6GK5636-2GS00-2AC2) SCALANCE SC642-2C (6GK5642-2GS00-2AC2) SCALANCE SC646-2C (6GK5646-2GS00-2AC2) SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0)

Description A vulnerability has been identified in various Siemens products. By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-34821

Affected Products

Ruggedcom Rm1224 Lte(4G) Eu

Ruggedcom Rm1224 Lte(4G) Nam

Scalance M804Pb

Scalance M812-1 Adsl-Router

Scalance M816-1 Adsl-Router

Scalance M826-2 Shdsl-Router

Scalance M874-2

Scalance M874-3

Scalance M876-3

Scalance M876-4

Scalance Mum853-1

Scalance Mum856-1

Scalance S615 Eec Lan-Router

Scalance Sc622-2C

Scalance Sc626-2C

Scalance Sc632-2C

Scalance Sc636-2C

Scalance Sc642-2C

Scalance Sc646-2C

Scalance Wab762-1

Scalance Wam763-1

Scalance Wam766-1

Scalance Wam766-1 Eec

Scalance Wub762-1 Ifeatures

Simatic Cp 1242-7 V2

Simatic Cp 1243-1

Simatic Cp 1243-7 Lte Eu

Simatic Cp 1243-7 Lte Us

Simatic Cp 1243-8 Irc

Simatic Cp 1542Sp-1 Irc

Simatic Cp 1543Sp-1

Siplus Et 200Sp Cp 1542Sp-1 Irc Tx Rail

Siplus Et 200Sp Cp 1543Sp-1 Isec

Siplus Et 200Sp Cp 1543Sp-1 Isec Tx Rail

Siplus Net Cp 1242-7 V2

Siplus Net Cp 1543-1

Siplus S7-1200 Cp 1243-1

Siplus S7-1200 Cp 1243-1 Rail

References · 8

• https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34821 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34821 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-517377.html · Note
• https://t.me/cibsecurity/45981 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-413565.html · Note
• https://t.me/cvenotify/107291 · Telegram Post