PT-2022-27834 · Siemens · Scalance X204Rna Eec+1

Published 2022-12-13 · Updated 2022-12-15 · CVE-2022-46351

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SCALANCE X204RNA (HSR) versions prior to V3.2.7 SCALANCE X204RNA (PRP) versions prior to V3.2.7 SCALANCE X204RNA EEC (HSR) versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP) versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP/HSR) versions prior to V3.2.7

Description A vulnerability has been identified that could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2) when specially crafted PROFINET DCP packets are sent.

Recommendations For SCALANCE X204RNA (HSR) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA (PRP) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (HSR) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (PRP) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (PRP/HSR) versions prior to V3.2.7, update to version V3.2.7 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-46351

Affected Products

Scalance X204Rna

Scalance X204Rna Eec

References · 3

• https://osv.dev/vulnerability/CVE-2022-46351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46351 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf · Vendor Advisory