CVE-2022-36323: Critical severity Siemens Scalance M-800 Firmware vulnerability

Q: What is the severity of CVE-2022-36323?

CVE-2022-36323 is classified as a high severity vulnerability due to the potential for remote code execution.

Q: Who is affected by CVE-2022-36323?

CVE-2022-36323 affects Siemens SCALANCE series products that do not properly sanitize an input field.

Q: How do I fix CVE-2022-36323?

To mitigate CVE-2022-36323, update the firmware of the affected devices to the latest version provided by Siemens.

Q: What kind of attack can be performed using CVE-2022-36323?

An attacker with administrative privileges can exploit CVE-2022-36323 to inject code or spawn a system root shell.

Q: Is there a workaround for CVE-2022-36323?

Currently, disabling remote access or administrative capabilities can serve as a temporary workaround until the firmware is updated.

Published Aug 10, 2022

Updated

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected Software

360 affected components

Siemens Scalance M-800 Firmware

Siemens SCALANCE M-800

Siemens Scalance S615 Firmware

Siemens SCALANCE S615

Siemens Scalance Sc-600 Firmware<2.3.1

Siemens SCALANCE SC-600

Siemens Scalance Sc622-2c Firmware<2.3.1

Siemens Scalance Sc622-2c

Siemens Scalance Sc632-2c Firmware<2.3.1

Siemens Scalance Sc632-2c

Siemens Scalance Sc636-2c Firmware<2.3.1

Siemens Scalance Sc636-2c

Siemens Scalance Sc642-2c Firmware<2.3.1

Siemens Scalance Sc642-2c

Siemens Scalance Sc646-2c Firmware<2.3.1

Siemens Scalance Sc646-2c

Siemens Scalance W700 Ieee 802.11ax Firmware

Siemens Scalance W700 Ieee 802.11ax

Siemens Scalance W700 Ieee 802.11n Firmware

Siemens SCALANCE W700 IEEE 802.11n

Siemens Scalance W700 Ieee 802.11ac Firmware

Siemens SCALANCE W700 IEEE 802.11ac

Siemens Scalance Xb-200 Firmware

Siemens SCALANCE XB-200

Siemens Scalance Xb205-3 Firmware

Siemens Scalance Xb205-3

Siemens Scalance Xb205-3ld Firmware

Siemens Scalance Xb205-3ld

Siemens Scalance Xb208 Firmware

Siemens Scalance Xb208

Siemens Scalance Xb213-3 Firmware

Siemens Scalance Xb213-3

Siemens Scalance Xb213-3ld Firmware

Siemens Scalance Xb213-3ld

Siemens Scalance Xb216 Firmware

Siemens Scalance Xb216

Siemens Scalance Xc-200 Firmware

Siemens SCALANCE XC-200

Siemens Scalance Xc206-2 Firmware

Siemens Scalance Xc206-2

Siemens Scalance Xc206-2g Poe Firmware

Siemens Scalance Xc206-2g Poe

Siemens Scalance Xc206-2g Poe Eec Firmware

Siemens Scalance Xc206-2g Poe Eec

Siemens Scalance Xc206-2sfp Eec Firmware

Siemens Scalance Xc206-2sfp Eec

Siemens Scalance Xc206-2sfp G Firmware

Siemens Scalance Xc206-2sfp G

Siemens Scalance Xc206-2sfp G \(e\/ip\) Firmware

Siemens Scalance Xc206-2sfp G \(e\/ip\)

Siemens Scalance Xc206-2sfp G Eec Firmware

Siemens Scalance Xc206-2sfp G Eec

Siemens Scalance Xc208 Firmware

Siemens Scalance Xc208

Siemens Scalance Xc208eec Firmware

Siemens Scalance Xc208eec

Siemens Scalance Xc208g Firmware

Siemens Scalance Xc208g

Siemens Scalance Xc208g \(e\/ip\) Firmware

Siemens Scalance Xc208g \(e\/ip\)

Siemens Scalance Xc208g Eec Firmware

Siemens Scalance Xc208g Eec

Siemens Scalance Xc208g Poe Firmware

Siemens Scalance Xc208g Poe

Siemens Scalance Xc216 Firmware

Siemens Scalance Xc216

Siemens Scalance Xc216-4c Firmware

Siemens Scalance Xc216-4c

Siemens Scalance Xc216-4c G Firmware

Siemens Scalance Xc216-4c G

Siemens Scalance Xc216-4c G \(e\/ip\) Firmware

Siemens Scalance Xc216-4c G \(e\/ip\)

Siemens Scalance Xc216-4c G Eec Firmware

Siemens Scalance Xc216-4c G Eec

Siemens Scalance Xc216eec Firmware

Siemens Scalance Xc216eec

Siemens Scalance Xc224 Firmware

Siemens Scalance Xc224

Siemens Scalance Xc224-4c G Firmware

Siemens Scalance Xc224-4c G

Siemens Scalance Xc224-4c G \(e\/ip\) Firmware

Siemens Scalance Xc224-4c G \(e\/ip\)

Siemens Scalance Xc224-4c G Eec Firmware

Siemens Scalance Xc224-4c G Eec

Siemens Scalance Xf-200ba Firmware

Siemens SCALANCE XF-200BA

Siemens Scalance Xf204-2ba Dna Firmware

Siemens Scalance Xf204-2ba Dna

Siemens Scalance Xf204-2ba Irt Firmware

Siemens Scalance Xf204-2ba Irt

Siemens Scalance Xm400 Firmware

Siemens Scalance Xm400

Siemens Scalance Xm408-4c Firmware

Siemens Scalance Xm408-4c

Siemens Scalance Xm408-4c L3 Firmware

Siemens Scalance Xm408-4c L3

Siemens Scalance Xm408-8c Firmware

Siemens Scalance Xm408-8c

Siemens Scalance Xm408-8c L3 Firmware

Siemens Scalance Xm408-8c L3

Siemens Scalance Xm416-4c Firmware

Siemens Scalance Xm416-4c

Siemens Scalance Xm416-4c L3 Firmware

Siemens Scalance Xm416-4c L3

Siemens Scalance Xp-200 Firmware

Siemens SCALANCE XP-200

Siemens Scalance Xp208 Firmware

Siemens Scalance Xp208

Siemens Scalance Xp208 \(eip\) Firmware

Siemens Scalance Xp208 \(eip\)

Siemens Scalance Xp208eec Firmware

Siemens Scalance Xp208eec

Siemens Scalance Xp208poe Eec Firmware

Siemens Scalance Xp208poe Eec

Siemens Scalance Xp216 Firmware

Siemens Scalance Xp216

Siemens Scalance Xp216 \(eip\) Firmware

Siemens Scalance Xp216 \(eip\)

Siemens Scalance Xp216eec Firmware

Siemens Scalance Xp216eec

Siemens Scalance Xp216poe Eec Firmware

Siemens Scalance Xp216poe Eec

Siemens Scalance Xr-300 Firmware

Siemens Scalance Xr-300

Siemens Scalance Xr-300eec Firmware

Siemens Scalance Xr-300eec

Siemens Scalance Xr-300poe Firmware

Siemens Scalance Xr-300poe

Siemens Scalance Xr-300wg Firmware

Siemens SCALANCE XR-300WG

Siemens Scalance Xr324-12m Firmware

Siemens Scalance Xr324-12m

Siemens Scalance Xr324-12m Ts Firmware

Siemens Scalance Xr324-12m Ts

Siemens Scalance Xr324-4m Eec Firmware

Siemens Scalance Xr324-4m Eec

Siemens Scalance Xr324-4m Poe Firmware

Siemens Scalance Xr324-4m Poe

Siemens Scalance Xr324-4m Poe Ts Firmware

Siemens Scalance Xr324-4m Poe Ts

Siemens Scalance Xr324wg Firmware

Siemens Scalance Xr324wg

Siemens Scalance Xr326-2c Poe Wg Firmware

Siemens Scalance Xr326-2c Poe Wg

Siemens Scalance Xr328-4c Wg Firmware

Siemens Scalance Xr328-4c Wg

Siemens Scalance Xr500 Firmware

Siemens Scalance Xr500

Siemens Scalance Xr524 Firmware

Siemens Scalance Xr524

Siemens Scalance Xr524-8c Firmware

Siemens Scalance Xr524-8c

Siemens Scalance Xr524-8c L3 Firmware

Siemens Scalance Xr524-8c L3

Siemens Scalance Xr526 Firmware

Siemens Scalance Xr526

Siemens Scalance Xr526-8c Firmware

Siemens Scalance Xr526-8c

Siemens Scalance Xr526-8c L3 Firmware

Siemens Scalance Xr526-8c L3

Siemens Scalance Xr528 Firmware

Siemens Scalance Xr528

Siemens Scalance Xr528-6m Firmware

Siemens Scalance Xr528-6m

Siemens Scalance Xr528-6m 2hr2 Firmware

Siemens Scalance Xr528-6m 2hr2

Siemens Scalance Xr528-6m 2hr2 L3 Firmware

Siemens Scalance Xr528-6m 2hr2 L3

Siemens Scalance Xr528-6m L3 Firmware

Siemens Scalance Xr528-6m L3

Siemens Scalance Xr552 Firmware

Siemens Scalance Xr552

Siemens Scalance Xr552-12 Firmware

Siemens Scalance Xr552-12

Siemens Scalance Xr552-12m Firmware

Siemens Scalance Xr552-12m

Siemens Scalance Xr552-12m 2hr2 Firmware

Siemens Scalance Xr552-12m 2hr2

Siemens Scalance Xr552-12m 2hr2 L3 Firmware

Siemens Scalance Xr552-12m 2hr2 L3

All of the following

Siemens Scalance M-800 Firmware

Siemens SCALANCE M-800

All of the following

Siemens Scalance S615 Firmware

Siemens SCALANCE S615

All of the following

Siemens Scalance Sc-600 Firmware<2.3.1

Siemens SCALANCE SC-600

All of the following

Siemens Scalance Sc622-2c Firmware<2.3.1

Siemens Scalance Sc622-2c

All of the following

Siemens Scalance Sc632-2c Firmware<2.3.1

Siemens Scalance Sc632-2c

All of the following

Siemens Scalance Sc636-2c Firmware<2.3.1

Siemens Scalance Sc636-2c

All of the following

Siemens Scalance Sc642-2c Firmware<2.3.1

Siemens Scalance Sc642-2c

All of the following

Siemens Scalance Sc646-2c Firmware<2.3.1

Siemens Scalance Sc646-2c

All of the following

Siemens Scalance W700 Ieee 802.11ax Firmware

Siemens Scalance W700 Ieee 802.11ax

All of the following

Siemens Scalance W700 Ieee 802.11n Firmware

Siemens SCALANCE W700 IEEE 802.11n

All of the following

Siemens Scalance W700 Ieee 802.11ac Firmware

Siemens SCALANCE W700 IEEE 802.11ac

All of the following

Siemens Scalance Xb-200 Firmware

Siemens SCALANCE XB-200

All of the following

Siemens Scalance Xb205-3 Firmware

Siemens Scalance Xb205-3

All of the following

Siemens Scalance Xb205-3ld Firmware

Siemens Scalance Xb205-3ld

All of the following

Siemens Scalance Xb208 Firmware

Siemens Scalance Xb208

All of the following

Siemens Scalance Xb213-3 Firmware

Siemens Scalance Xb213-3

All of the following

Siemens Scalance Xb213-3ld Firmware

Siemens Scalance Xb213-3ld

All of the following

Siemens Scalance Xb216 Firmware

Siemens Scalance Xb216

All of the following

Siemens Scalance Xc-200 Firmware

Siemens SCALANCE XC-200

All of the following

Siemens Scalance Xc206-2 Firmware

Siemens Scalance Xc206-2

All of the following

Siemens Scalance Xc206-2g Poe Firmware

Siemens Scalance Xc206-2g Poe

All of the following

Siemens Scalance Xc206-2g Poe Eec Firmware

Siemens Scalance Xc206-2g Poe Eec

All of the following

Siemens Scalance Xc206-2sfp Eec Firmware

Siemens Scalance Xc206-2sfp Eec

All of the following

Siemens Scalance Xc206-2sfp G Firmware

Siemens Scalance Xc206-2sfp G

All of the following

Siemens Scalance Xc206-2sfp G \(e\/ip\) Firmware

Siemens Scalance Xc206-2sfp G \(e\/ip\)

All of the following

Siemens Scalance Xc206-2sfp G Eec Firmware

Siemens Scalance Xc206-2sfp G Eec

All of the following

Siemens Scalance Xc208 Firmware

Siemens Scalance Xc208

All of the following

Siemens Scalance Xc208eec Firmware

Siemens Scalance Xc208eec

All of the following

Siemens Scalance Xc208g Firmware

Siemens Scalance Xc208g

All of the following

Siemens Scalance Xc208g \(e\/ip\) Firmware

Siemens Scalance Xc208g \(e\/ip\)

All of the following

Siemens Scalance Xc208g Eec Firmware

Siemens Scalance Xc208g Eec

All of the following

Siemens Scalance Xc208g Poe Firmware

Siemens Scalance Xc208g Poe

All of the following

Siemens Scalance Xc216 Firmware

Siemens Scalance Xc216

All of the following

Siemens Scalance Xc216-4c Firmware

Siemens Scalance Xc216-4c

All of the following

Siemens Scalance Xc216-4c G Firmware

Siemens Scalance Xc216-4c G

All of the following

Siemens Scalance Xc216-4c G \(e\/ip\) Firmware

Siemens Scalance Xc216-4c G \(e\/ip\)

All of the following

Siemens Scalance Xc216-4c G Eec Firmware

Siemens Scalance Xc216-4c G Eec

All of the following

Siemens Scalance Xc216eec Firmware

Siemens Scalance Xc216eec

All of the following

Siemens Scalance Xc224 Firmware

Siemens Scalance Xc224

All of the following

Siemens Scalance Xc224-4c G Firmware

Siemens Scalance Xc224-4c G

All of the following

Siemens Scalance Xc224-4c G \(e\/ip\) Firmware

Siemens Scalance Xc224-4c G \(e\/ip\)

All of the following

Siemens Scalance Xc224-4c G Eec Firmware

Siemens Scalance Xc224-4c G Eec

All of the following

Siemens Scalance Xf-200ba Firmware

Siemens SCALANCE XF-200BA

All of the following

Siemens Scalance Xf204-2ba Dna Firmware

Siemens Scalance Xf204-2ba Dna

All of the following

Siemens Scalance Xf204-2ba Irt Firmware

Siemens Scalance Xf204-2ba Irt

All of the following

Siemens Scalance Xm400 Firmware

Siemens Scalance Xm400

All of the following

Siemens Scalance Xm408-4c Firmware

Siemens Scalance Xm408-4c

All of the following

Siemens Scalance Xm408-4c L3 Firmware

Siemens Scalance Xm408-4c L3

All of the following

Siemens Scalance Xm408-8c Firmware

Siemens Scalance Xm408-8c

All of the following

Siemens Scalance Xm408-8c L3 Firmware

Siemens Scalance Xm408-8c L3

All of the following

Siemens Scalance Xm416-4c Firmware

Siemens Scalance Xm416-4c

All of the following

Siemens Scalance Xm416-4c L3 Firmware

Siemens Scalance Xm416-4c L3

All of the following

Siemens Scalance Xp-200 Firmware

Siemens SCALANCE XP-200

All of the following

Siemens Scalance Xp208 Firmware

Siemens Scalance Xp208

All of the following

Siemens Scalance Xp208 \(eip\) Firmware

Siemens Scalance Xp208 \(eip\)

All of the following

Siemens Scalance Xp208eec Firmware

Siemens Scalance Xp208eec

All of the following

Siemens Scalance Xp208poe Eec Firmware

Siemens Scalance Xp208poe Eec

All of the following

Siemens Scalance Xp216 Firmware

Siemens Scalance Xp216

All of the following

Siemens Scalance Xp216 \(eip\) Firmware

Siemens Scalance Xp216 \(eip\)

All of the following

Siemens Scalance Xp216eec Firmware

Siemens Scalance Xp216eec

All of the following

Siemens Scalance Xp216poe Eec Firmware

Siemens Scalance Xp216poe Eec

All of the following

Siemens Scalance Xr-300 Firmware

Siemens Scalance Xr-300

All of the following

Siemens Scalance Xr-300eec Firmware

Siemens Scalance Xr-300eec

All of the following

Siemens Scalance Xr-300poe Firmware

Siemens Scalance Xr-300poe

All of the following

Siemens Scalance Xr-300wg Firmware

Siemens SCALANCE XR-300WG

All of the following

Siemens Scalance Xr324-12m Firmware

Siemens Scalance Xr324-12m

All of the following

Siemens Scalance Xr324-12m Ts Firmware

Siemens Scalance Xr324-12m Ts

All of the following

Siemens Scalance Xr324-4m Eec Firmware

Siemens Scalance Xr324-4m Eec

All of the following

Siemens Scalance Xr324-4m Poe Firmware

Siemens Scalance Xr324-4m Poe

All of the following

Siemens Scalance Xr324-4m Poe Ts Firmware

Siemens Scalance Xr324-4m Poe Ts

All of the following

Siemens Scalance Xr324wg Firmware

Siemens Scalance Xr324wg

All of the following

Siemens Scalance Xr326-2c Poe Wg Firmware

Siemens Scalance Xr326-2c Poe Wg

All of the following

Siemens Scalance Xr328-4c Wg Firmware

Siemens Scalance Xr328-4c Wg

All of the following

Siemens Scalance Xr500 Firmware

Siemens Scalance Xr500

All of the following

Siemens Scalance Xr524 Firmware

Siemens Scalance Xr524

All of the following

Siemens Scalance Xr524-8c Firmware

Siemens Scalance Xr524-8c

All of the following

Siemens Scalance Xr524-8c L3 Firmware

Siemens Scalance Xr524-8c L3

All of the following

Siemens Scalance Xr526 Firmware

Siemens Scalance Xr526

All of the following

Siemens Scalance Xr526-8c Firmware

Siemens Scalance Xr526-8c

All of the following

Siemens Scalance Xr526-8c L3 Firmware

Siemens Scalance Xr526-8c L3

All of the following

Siemens Scalance Xr528 Firmware

Siemens Scalance Xr528

All of the following

Siemens Scalance Xr528-6m Firmware

Siemens Scalance Xr528-6m

All of the following

Siemens Scalance Xr528-6m 2hr2 Firmware

Siemens Scalance Xr528-6m 2hr2

All of the following

Siemens Scalance Xr528-6m 2hr2 L3 Firmware

Siemens Scalance Xr528-6m 2hr2 L3

All of the following

Siemens Scalance Xr528-6m L3 Firmware

Siemens Scalance Xr528-6m L3

All of the following

Siemens Scalance Xr552 Firmware

Siemens Scalance Xr552

All of the following

Siemens Scalance Xr552-12 Firmware

Siemens Scalance Xr552-12

All of the following

Siemens Scalance Xr552-12m Firmware

Siemens Scalance Xr552-12m

All of the following

Siemens Scalance Xr552-12m 2hr2 Firmware

Siemens Scalance Xr552-12m 2hr2

All of the following

Siemens Scalance Xr552-12m 2hr2 L3 Firmware

Siemens Scalance Xr552-12m 2hr2 L3

Remediation

Patch Available

https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf

Event History

Aug 10, 2022

CVE Published

via MITRE·11:18 AM

Data Sourced

via MITRE·11:18 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-36323?

CVE-2022-36323 is classified as a high severity vulnerability due to the potential for remote code execution.

Who is affected by CVE-2022-36323?

CVE-2022-36323 affects Siemens SCALANCE series products that do not properly sanitize an input field.

How do I fix CVE-2022-36323?

To mitigate CVE-2022-36323, update the firmware of the affected devices to the latest version provided by Siemens.

What kind of attack can be performed using CVE-2022-36323?

An attacker with administrative privileges can exploit CVE-2022-36323 to inject code or spawn a system root shell.

Is there a workaround for CVE-2022-36323?

Currently, disabling remote access or administrative capabilities can serve as a temporary workaround until the firmware is updated.

CVE-2022-36323: Critical severity Siemens Scalance M-800 Firmware vulnerability

Affected Software

Remediation

Patch Available

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-36323?

Who is affected by CVE-2022-36323?

How do I fix CVE-2022-36323?

What kind of attack can be performed using CVE-2022-36323?

Is there a workaround for CVE-2022-36323?

Company

Resources

Contact