PT-2022-3541 · Siemens · Scalance X307-2+12

Published 2022-04-12 · Updated 2022-04-19 · CVE-2022-25754

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 versions (230V), (230V, coated), (24V), (24V, coated), (2x 230V), (2x 230V, coated), (2x 24V), (2x 24V, coated) SCALANCE X304-2FE SCALANCE X306-1LD FE SCALANCE X307-2 versions (230V), (230V, coated), (24V), (24V, coated), (2x 230V), (2x 230V, coated), (2x 24V), (2x 24V, coated) SCALANCE X307-3 SCALANCE X307-3LD SCALANCE X308-2 versions including LD, LH, LH+, M, M PoE, M TS SCALANCE X310 SCALANCE X310FE SCALANCE X320-1 FE SCALANCE X320-1-2LD FE SCALANCE X408-2 SCALANCE XR324-12M versions (230V, ports on front), (230V, ports on rear), (24V, ports on front), (24V, ports on rear), TS (24V) SCALANCE XR324-4M versions including EEC (100-240VAC/60-250VDC, ports on front), EEC (100-240VAC/60-250VDC, ports on rear), EEC (24V, ports on front), EEC (24V, ports on rear), EEC (2x 100-240VAC/60-250VDC, ports on front), EEC (2x 100-240VAC/60-250VDC, ports on rear), EEC (2x 24V, ports on front), EEC (2x 24V, ports on rear), PoE (230V, ports on front), PoE (230V, ports on rear), PoE (24V, ports on front), PoE (24V, ports on rear), PoE TS (24V, ports on front) SIPLUS NET SCALANCE X308-2

Description The integrated web server of the affected devices could allow remote attackers to perform actions with the permissions of a victim user, provided the victim user has an active session and is induced to trigger the malicious request. This issue is related to cross-site request forgery.

Recommendations As a temporary workaround, consider disabling the integrated web server of the affected devices until a patch is available. Restrict access to the web server to minimize the risk of exploitation. Avoid using the web server for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2022-04324

CVE-2022-25754

Affected Products

Scalance X302-7

Scalance X304-2Fe

Scalance X306-1Ld Fe

Scalance X307-2

Scalance X307-3Ld

Scalance X308-2

Scalance X310

Scalance X320-1 Fe

Scalance X320-1-2Ld Fe

Scalance X408-2

Scalance Xr324-12M

Scalance Xr324-4M

Siplus Net Scalance X308-2

References · 6

• https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25754 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25754 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04324 · Security Note
• https://t.me/cvenotify/28741 · Telegram Post
• https://t.me/cibsecurity/40592 · Telegram Post