PT-2022-3572 · Siemens · Scalance X307-2+11

Published 2022-04-12 · Updated 2022-04-19 · CVE-2022-26380

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 versions SCALANCE X304-2FE version SCALANCE X306-1LD FE version SCALANCE X307-2 version SCALANCE X307-3 version SCALANCE X307-3LD version SCALANCE X308-2 version SCALANCE X310 version SCALANCE X320-1 version SCALANCE X408-2 version SCALANCE XR324-4M version SCALANCE XR324-12M version SIPLUS NET SCALANCE X308-2 version

Description The issue is related to the improper validation of a certain SNMP key, which could allow an attacker to trigger a reboot of an affected device by requesting specific SNMP information. This is due to a buffer overflow vulnerability in the device's firmware, allowing an attacker to cause a denial of service.

Recommendations As a temporary workaround, consider disabling the SNMP service on the affected devices until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the vulnerable SNMP key in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-04356

CVE-2022-26380

Affected Products

Scalance X302-7

Scalance X304-2Fe

Scalance X306-1Ld Fe

Scalance X307-2

Scalance X307-3Ld

Scalance X308-2

Scalance X310

Scalance X320-1 Fe

Scalance X408-2

Scalance Xr324-12M

Scalance Xr324-4M

Siplus Net Scalance X308-2

References · 5

• https://bdu.fstec.ru/vul/2022-04356 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26380 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26380 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf · Vendor Advisory
• https://t.me/cibsecurity/40599 · Telegram Post