PT-2022-27835 · Siemens · Scalance X204Rna+1

Published 2022-12-13 · Updated 2022-12-16 · CVE-2022-46352

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SCALANCE X204RNA (HSR) versions prior to V3.2.7 SCALANCE X204RNA (PRP) versions prior to V3.2.7 SCALANCE X204RNA EEC (HSR) versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP) versions prior to V3.2.7 SCALANCE X204RNA EEC (PRP/HSR) versions prior to V3.2.7

Description A vulnerability has been identified that could cause a denial of service condition in affected products when specially crafted PROFINET DCP packets are received.

Recommendations For SCALANCE X204RNA (HSR) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA (PRP) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (HSR) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (PRP) versions prior to V3.2.7, update to version V3.2.7 or later. For SCALANCE X204RNA EEC (PRP/HSR) versions prior to V3.2.7, update to version V3.2.7 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-46352

Affected Products

Scalance X204Rna

Scalance X204Rna Eec

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-46352 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-46352 · Vendor Advisory