CVE-2022-26647
First published: Tue Jul 12 2022(Updated: )
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Scalance X200-4p Irt Firmware | ||
| Siemens Scalance X200-4p Irt | ||
| Siemens Scalance X201-3p Irt Firmware | ||
| Siemens SCALANCE X201-3P IRT | ||
| Siemens Scalance X201-3p Irt Pro Firmware | ||
| Siemens SCALANCE X201-3P IRT PRO | ||
| Siemens Scalance X202-2irt Firmware | ||
| Siemens Scalance X202-2irt | ||
| Siemens Scalance X202-2p Irt Firmware | ||
| Siemens Scalance X202-2p Irt | ||
| Siemens Scalance X202-2p Irt Pro Firmware | ||
| Siemens SCALANCE X202-2P IRT PRO | ||
| Siemens Scalance X204-2 Firmware | <5.2.6 | |
| Siemens Scalance X204-2 | ||
| Siemens Scalance X204-2fm Firmware | <5.2.6 | |
| Siemens SCALANCE X204-2FM | ||
| Siemens Scalance X204-2ld Firmware | <5.2.6 | |
| Siemens Scalance X204-2ld | ||
| Siemens Scalance X204-2ld Ts Firmware | <5.2.6 | |
| Siemens Scalance X204-2ld Ts | ||
| Siemens Scalance X204-2ts Firmware | <5.2.6 | |
| Siemens Scalance X204-2ts | ||
| Siemens Scalance X204irt Firmware | ||
| Siemens Scalance X204irt | ||
| Siemens Scalance X204irt Pro Firmware | ||
| Siemens Scalance X204irt Pro | ||
| Siemens Scalance X206-1 Firmware | <5.2.6 | |
| Siemens SCALANCE X206-1 | ||
| Siemens Scalance X206-1ld Firmware | <5.2.6 | |
| Siemens Scalance X206-1ld | ||
| Siemens Scalance X208 Firmware | <5.2.6 | |
| Siemens Scalance X208 | ||
| Siemens Scalance X208 Pro Firmware | <5.2.6 | |
| Siemens Scalance X208 Pro | ||
| Siemens Scalance X212-2 Firmware | <5.2.6 | |
| Siemens SCALANCE X212-2 | ||
| Siemens Scalance X212-2ld Firmware | <5.2.6 | |
| Siemens Scalance X212-2ld | ||
| Siemens Scalance X216 Firmware | <5.2.6 | |
| Siemens SCALANCE X216 | ||
| Siemens Scalance X224 Firmware | <5.2.6 | |
| Siemens SCALANCE X224 | ||
| Siemens Scalance Xf201-3p Irt Firmware | ||
| Siemens Scalance Xf201-3p Irt | ||
| Siemens Scalance Xf202-2p Irt Firmware | ||
| Siemens Scalance Xf202-2p Irt | ||
| Siemens Scalance Xf204 Firmware | <5.2.6 | |
| Siemens Scalance Xf204 | ||
| Siemens Scalance Xf204-2 Firmware | <5.2.6 | |
| Siemens Scalance Xf204-2 | ||
| Siemens Scalance Xf204-2ba Irt Firmware | ||
| Siemens Scalance Xf204-2ba Irt | ||
| Siemens Scalance Xf204irt Firmware | ||
| Siemens Scalance Xf204irt | ||
| Siemens Scalance Xf206-1 Firmware | <5.2.6 | |
| Siemens Scalance Xf206-1 | ||
| Siemens Scalance Xf208 Firmware | <5.2.6 | |
| Siemens Scalance Xf208 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/remedy
- agent/severity
- agent/references
- agent/weakness
- agent/softwarecombine
- agent/description
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens scalance x200-4p irt firmware
- canonical/siemens scalance x200-4p irt
- canonical/siemens scalance x201-3p irt firmware
- canonical/siemens scalance x201-3p irt
- canonical/siemens scalance x201-3p irt pro firmware
- canonical/siemens scalance x201-3p irt pro
- canonical/siemens scalance x202-2irt firmware
- canonical/siemens scalance x202-2irt
- canonical/siemens scalance x202-2p irt firmware
- canonical/siemens scalance x202-2p irt
- canonical/siemens scalance x202-2p irt pro firmware
- canonical/siemens scalance x202-2p irt pro
- canonical/siemens scalance x204-2 firmware
- canonical/siemens scalance x204-2
- canonical/siemens scalance x204-2fm firmware
- canonical/siemens scalance x204-2fm
- canonical/siemens scalance x204-2ld firmware
- canonical/siemens scalance x204-2ld
- canonical/siemens scalance x204-2ld ts firmware
- canonical/siemens scalance x204-2ld ts
- canonical/siemens scalance x204-2ts firmware
- canonical/siemens scalance x204-2ts
- canonical/siemens scalance x204irt firmware
- canonical/siemens scalance x204irt
- canonical/siemens scalance x204irt pro firmware
- canonical/siemens scalance x204irt pro
- canonical/siemens scalance x206-1 firmware
- canonical/siemens scalance x206-1
- canonical/siemens scalance x206-1ld firmware
- canonical/siemens scalance x206-1ld
- canonical/siemens scalance x208 firmware
- canonical/siemens scalance x208
- canonical/siemens scalance x208 pro firmware
- canonical/siemens scalance x208 pro
- canonical/siemens scalance x212-2 firmware
- canonical/siemens scalance x212-2
- canonical/siemens scalance x212-2ld firmware
- canonical/siemens scalance x212-2ld
- canonical/siemens scalance x216 firmware
- canonical/siemens scalance x216
- canonical/siemens scalance x224 firmware
- canonical/siemens scalance x224
- canonical/siemens scalance xf201-3p irt firmware
- canonical/siemens scalance xf201-3p irt
- canonical/siemens scalance xf202-2p irt firmware
- canonical/siemens scalance xf202-2p irt
- canonical/siemens scalance xf204 firmware
- canonical/siemens scalance xf204
- canonical/siemens scalance xf204-2 firmware
- canonical/siemens scalance xf204-2
- canonical/siemens scalance xf204-2ba irt firmware
- canonical/siemens scalance xf204-2ba irt
- canonical/siemens scalance xf204irt firmware
- canonical/siemens scalance xf204irt
- canonical/siemens scalance xf206-1 firmware
- canonical/siemens scalance xf206-1
- canonical/siemens scalance xf208 firmware
- canonical/siemens scalance xf208