Scalance W700 Ieee 802 11N Firmware CVE-2022-36323

CRITICAL

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2022-08-10 productcert@siemens.com

Code Injection Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware Scalance S615 Firmware Scalance Sc 600 Firmware Scalance Sc622 2C Firmware Scalance Sc632 2C Firmware Scalance Sc636 2C Firmware Scalance Sc642 2C Firmware Scalance Sc646 2C Firmware Scalance W700 Ieee 802 11Ac Firmware Scalance Xb 200 Firmware Scalance Xb205 3 Firmware Scalance Xb205 3Ld Firmware Scalance Xb208 Firmware Scalance Xb213 3 Firmware Scalance Xb213 3Ld Firmware Scalance Xb216 Firmware Scalance Xc 200 Firmware Scalance Xc206 2 Firmware Scalance Xc206 2G Poe Firmware Scalance Xc206 2G Poe Eec Firmware Scalance Xc206 2Sfp Eec Firmware Scalance Xc206 2Sfp G Firmware Scalance Xc206 2Sfp G E Ip Firmware Scalance Xc206 2Sfp G Eec Firmware Scalance Xc208 Firmware Scalance Xc208Eec Firmware Scalance Xc208G Firmware Scalance Xc208G E Ip Firmware Scalance Xc208G Eec Firmware Scalance Xc208G Poe Firmware Scalance Xc216 Firmware Scalance Xc216 4C Firmware Scalance Xc216 4C G Firmware Scalance Xc216 4C G E Ip Firmware Scalance Xc216 4C G Eec Firmware Scalance Xc216Eec Firmware Scalance Xc224 Firmware Scalance Xc224 4C G Firmware Scalance Xc224 4C G E Ip Firmware Scalance Xc224 4C G Eec Firmware Scalance Xf 200Ba Firmware Scalance Xf204 2Ba Dna Firmware Scalance Xf204 2Ba Irt Firmware Scalance Xm400 Firmware Scalance Xm408 4C Firmware Scalance Xm408 4C L3 Firmware Scalance Xm408 8C Firmware Scalance Xm408 8C L3 Firmware Scalance Xm416 4C Firmware Scalance Xm416 4C L3 Firmware Scalance Xp 200 Firmware Scalance Xp208 Firmware Scalance Xp208 Eip Firmware Scalance Xp208Eec Firmware Scalance Xp208Poe Eec Firmware Scalance Xp216 Firmware Scalance Xp216 Eip Firmware Scalance Xp216Eec Firmware Scalance Xp216Poe Eec Firmware Scalance Xr 300 Firmware Scalance Xr 300Eec Firmware Scalance Xr 300Poe Firmware Scalance Xr 300Wg Firmware Scalance Xr324 12M Firmware Scalance Xr324 12M Ts Firmware Scalance Xr324 4M Eec Firmware Scalance Xr324 4M Poe Firmware Scalance Xr324 4M Poe Ts Firmware Scalance Xr324Wg Firmware Scalance Xr326 2C Poe Wg Firmware Scalance Xr328 4C Wg Firmware Scalance Xr500 Firmware Scalance Xr524 Firmware Scalance Xr524 8C Firmware Scalance Xr524 8C L3 Firmware Scalance Xr526 Firmware Scalance Xr526 8C Firmware Scalance Xr526 8C L3 Firmware Scalance Xr528 Firmware Scalance Xr528 6M Firmware Scalance Xr528 6M 2Hr2 Firmware Scalance Xr528 6M 2Hr2 L3 Firmware Scalance Xr528 6M L3 Firmware Scalance Xr552 Firmware Scalance Xr552 12 Firmware Scalance Xr552 12M Firmware Scalance Xr552 12M 2Hr2 Firmware Scalance Xr552 12M 2Hr2 L3 Firmware

9.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 10, 2022 - 12:15 cve.org

CRITICAL 9.1

DescriptionCVE.org

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

AnalysisAI

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-74. Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Affected products include: Siemens Scalance M-800 Firmware, Siemens Scalance S615 Firmware, Siemens Scalance Sc-600 Firmware, Siemens Scalance Sc622-2C Firmware, Siemens Scalance Sc632-2C Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Scalance W700 Ieee 802 11N Firmware

View all

CVE-2022-36324 HIGH Act Now

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. Rated high severity (CVSS 7.5), this vu

CVE-2022-36325 MEDIUM This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium seve

CVE-2020-26144 MEDIUM This Month

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. Rated medium severity (CVSS 6.5), this vulnerability i

CVE-2020-26143 MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. Rated medium severity (CVSS 6.5), this

CVE-2020-26146 MEDIUM This Month

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. Rated medium severity (CVSS 5.3), this vulnerability i

CVE-2020-26147 MEDIUM This Month

An issue was discovered in the Linux kernel 5.8.9. Rated medium severity (CVSS 5.4), this vulnerability is no authentica

Same weakness CWE-74 – Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

View all

CVE-2019-2725 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2022-27924 HIGH POC

CVE-2016-4010 CRITICAL POC

CVE-2015-1592 HIGH POC

CVE-2025-20281 CRITICAL POC

CVE-2015-7309 MEDIUM POC

CVE-2014-8423 CRITICAL POC

Same technique Code Injection

View all

CVE-2023-3519 CRITICAL POC

CVE-2021-22205 CRITICAL POC

CVE-2024-23692 CRITICAL POC

CVE-2012-0158 HIGH POC

CVE-2021-44529 CRITICAL POC

CVE-2014-6287 CRITICAL POC

CVE-2017-7494 CRITICAL POC

CVE-2025-24893 CRITICAL POC

Share

CVE-2022-36323 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy