Scalance W700 Ieee 802 11N Firmware CVE-2022-36324

HIGH

Allocation of Resources Without Limits or Throttling (CWE-770)

2022-08-10 productcert@siemens.com

Denial Of Service Siemens Scalance W700 Ieee 802 11N Firmware Scalance W700 Ieee 802 11Ax Firmware Scalance M 800 Firmware Scalance S615 Firmware Scalance W700 Ieee 802 11Ac Firmware Scalance Xb 200 Firmware Scalance Xb205 3 Firmware Scalance Xb205 3Ld Firmware Scalance Xb208 Firmware Scalance Xb213 3 Firmware Scalance Xb213 3Ld Firmware Scalance Xb216 Firmware Scalance Xc 200 Firmware Scalance Xc206 2 Firmware Scalance Xc206 2G Poe Firmware Scalance Xc206 2G Poe Eec Firmware Scalance Xc206 2Sfp Eec Firmware Scalance Xc206 2Sfp G Firmware Scalance Xc206 2Sfp G E Ip Firmware Scalance Xc206 2Sfp G Eec Firmware Scalance Xc208 Firmware Scalance Xc208Eec Firmware Scalance Xc208G Firmware Scalance Xc208G E Ip Firmware Scalance Xc208G Eec Firmware Scalance Xc208G Poe Firmware Scalance Xc216 Firmware Scalance Xc216 4C Firmware Scalance Xc216 4C G Firmware Scalance Xc216 4C G E Ip Firmware Scalance Xc216 4C G Eec Firmware Scalance Xc216Eec Firmware Scalance Xc224 Firmware Scalance Xc224 4C G Firmware Scalance Xc224 4C G E Ip Firmware Scalance Xc224 4C G Eec Firmware Scalance Xf 200Ba Firmware Scalance Xf204 2Ba Dna Firmware Scalance Xf204 2Ba Irt Firmware Scalance Xm400 Firmware Scalance Xm408 4C Firmware Scalance Xm408 4C L3 Firmware Scalance Xm408 8C Firmware Scalance Xm408 8C L3 Firmware Scalance Xm416 4C Firmware Scalance Xm416 4C L3 Firmware Scalance Xp 200 Firmware Scalance Xp208 Firmware Scalance Xp208 Eip Firmware Scalance Xp208Eec Firmware Scalance Xp208Poe Eec Firmware Scalance Xp216 Firmware Scalance Xp216 Eip Firmware Scalance Xp216Eec Firmware Scalance Xp216Poe Eec Firmware Scalance Xr 300 Firmware Scalance Xr 300Eec Firmware Scalance Xr 300Poe Firmware Scalance Xr 300Wg Firmware Scalance Xr324 12M Firmware Scalance Xr324 12M Ts Firmware Scalance Xr324 4M Eec Firmware Scalance Xr324 4M Poe Firmware Scalance Xr324 4M Poe Ts Firmware Scalance Xr324Wg Firmware Scalance Xr326 2C Poe Wg Firmware Scalance Xr328 4C Wg Firmware Scalance Xr500 Firmware Scalance Xr524 Firmware Scalance Xr524 8C Firmware Scalance Xr524 8C L3 Firmware Scalance Xr526 Firmware Scalance Xr526 8C Firmware Scalance Xr526 8C L3 Firmware Scalance Xr528 Firmware Scalance Xr528 6M Firmware Scalance Xr528 6M 2Hr2 Firmware Scalance Xr528 6M 2Hr2 L3 Firmware Scalance Xr528 6M L3 Firmware Scalance Xr552 Firmware Scalance Xr552 12 Firmware Scalance Xr552 12M Firmware Scalance Xr552 12M 2Hr2 Firmware Scalance Xr552 12M 2Hr2 L3 Firmware

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 10, 2022 - 12:15 cve.org

HIGH 7.5

DescriptionCVE.org

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

AnalysisAI

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Allocation of Resources Without Limits (CWE-770), which allows attackers to exhaust system resources through uncontrolled allocation. Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack. Affected products include: Siemens Scalance M-800 Firmware, Siemens Scalance S615 Firmware, Siemens Scalance W700 Ieee 802.11Ax Firmware, Siemens Scalance W700 Ieee 802.11N Firmware, Siemens Scalance W700 Ieee 802.11Ac Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Set resource limits, implement rate limiting, validate input sizes.

More in Scalance W700 Ieee 802 11N Firmware

View all

CVE-2022-36323 CRITICAL Act Now

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remo

CVE-2022-36325 MEDIUM This Month

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium seve

CVE-2020-26144 MEDIUM This Month

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. Rated medium severity (CVSS 6.5), this vulnerability i

CVE-2020-26143 MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. Rated medium severity (CVSS 6.5), this

CVE-2020-26146 MEDIUM This Month

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. Rated medium severity (CVSS 5.3), this vulnerability i

CVE-2020-26147 MEDIUM This Month

An issue was discovered in the Linux kernel 5.8.9. Rated medium severity (CVSS 5.4), this vulnerability is no authentica

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all

CVE-2017-8779 HIGH POC

CVE-2025-53521 CRITICAL POC

CVE-2017-5850 HIGH POC

CVE-2025-26682 HIGH

CVE-2025-41770 HIGH

CVE-2025-26466 MEDIUM

CVE-2020-37067 CRITICAL POC

CVE-2021-47875 CRITICAL POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2022-36324 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy