PT-2022-25429 · Siemens · Scalance X201-3P Irt+21

Published 2022-10-11 · Updated 2022-10-14 · CVE-2022-40631

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SCALANCE X200-4P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT versions prior to V5.5.0 SCALANCE X201-3P IRT PRO versions prior to V5.5.0 SCALANCE X202-2IRT versions prior to V5.5.0 SCALANCE X202-2P IRT versions prior to V5.5.0 SCALANCE X202-2P IRT PRO versions prior to V5.5.0 SCALANCE X204-2 versions prior to V5.2.5 SCALANCE X204-2FM versions prior to V5.2.5 SCALANCE X204-2LD versions prior to V5.2.5 SCALANCE X204-2LD TS versions prior to V5.2.5 SCALANCE X204-2TS versions prior to V5.2.5 SCALANCE X204IRT versions prior to V5.5.0 SCALANCE X204IRT PRO versions prior to V5.5.0 SCALANCE X206-1 versions prior to V5.2.5 SCALANCE X206-1LD versions prior to V5.2.5 SCALANCE X208 versions prior to V5.2.5 SCALANCE X208PRO versions prior to V5.2.5 SCALANCE X212-2 versions prior to V5.2.5 SCALANCE X212-2LD versions prior to V5.2.5 SCALANCE X216 versions prior to V5.2.5 SCALANCE X224 versions prior to V5.2.5 SCALANCE XF201-3P IRT versions prior to V5.5.0 SCALANCE XF202-2P IRT versions prior to V5.5.0 SCALANCE XF204 versions prior to V5.2.5 SCALANCE XF204-2 versions prior to V5.2.5 SCALANCE XF204-2BA IRT versions prior to V5.5.0 SCALANCE XF204IRT versions prior to V5.5.0 SCALANCE XF206-1 versions prior to V5.2.5 SCALANCE XF208 versions prior to V5.2.5 SIPLUS NET SCALANCE X202-2P IRT versions prior to V5.5.0

Description A cross-site scripting vulnerability has been identified in the affected devices. This vulnerability could result in session hijacking if exploited by a threat actor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-40631

Affected Products

Scalance X200-4P Irt

Scalance X201-3P Irt

Scalance X201-3P Irt Pro

Scalance X202-2P Irt

Scalance Xf204-2

Scalance X204-2Fm

Scalance X204-2Ld

Scalance X204-2Ld Ts

Scalance X204-2Ts

Scalance X204Irt

Scalance X204Irt Pro

Scalance X206-1Ld

Scalance X208

Scalance X208Pro

Scalance X212-2Ld

Scalance X216

Scalance X224

Scalance Xf204

Scalance Xf204-2Ba Irt

Scalance Xf206-1

Scalance Xf208

Siplus Net Scalance X202-2P Irt

References · 3

• https://osv.dev/vulnerability/CVE-2022-40631 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-501891.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40631 · Security Note