CVE-2022-36325: XSS
First published: Wed Aug 10 2022(Updated: )
Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SCALANCE M-800 | ||
| Siemens Scalance M-800 Firmware | ||
| Siemens Scalance S615 EEC Firmware | ||
| Siemens Scalance S615 Firmware | ||
| Siemens Scalance S602 Firmware | <2.3.1 | |
| Siemens SCALANCE SC-600 family | ||
| Siemens Scalance SC622-2C Firmware | <2.3.1 | |
| Siemens Scalance SC622-2C Firmware | ||
| Siemens Scalance SC632-2C Firmware | <2.3.1 | |
| Siemens Scalance SC632-2C Firmware | ||
| Siemens Scalance SC636-2C | <2.3.1 | |
| Siemens Scalance SC636-2C | ||
| Siemens Scalance SC642-2C | <2.3.1 | |
| Siemens SCALANCE SC642-2C | ||
| Siemens Scalance SC646-2C Firmware | <2.3.1 | |
| Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2) | ||
| Siemens Scalance W700 Firmware | ||
| Siemens Scalance W700 | ||
| Siemens SCALANCE W700 | ||
| Siemens SCALANCE W-700 IEEE 802.11n family | ||
| Siemens Scalance W700 Series Firmware | ||
| Siemens SCALANCE W700 IEEE 802.11ac Firmware | ||
| Siemens Scalance XB-200 Firmware | ||
| Siemens SCALANCE XB-200 | ||
| Siemens SCALANCE XB205-3 (ST, PN) Firmware | ||
| Siemens SCALANCE XB205-3 (SC, PN) | ||
| Siemens SCALANCE XB205-3LD | ||
| Siemens SCALANCE XB205-3LD | ||
| Siemens Scalance XB208 | ||
| Siemens Scalance XB208 | ||
| Siemens Scalance XB213-3 | ||
| Siemens SCALANCE XB213-3 (ST, PN) Firmware | ||
| Siemens SCALANCE XB213-3LD Firmware | ||
| Siemens Scalance XB213-3LD Firmware | ||
| Siemens Scalance XB216 | ||
| Siemens Scalance XB216 | ||
| Siemens Scalance XC-200 Firmware | ||
| Siemens SCALANCE XC-200 | ||
| Siemens SCALANCE XC206-2 Firmware | ||
| Siemens SCALANCE XC206-2SFP G (EIP DEF.) Firmware | ||
| Siemens Scalance XC206-2G PoE | ||
| Siemens SCALANCE XC206-2G PoE (54 V DC) | ||
| Siemens SCALANCE XC206-2G PoE (54 V DC) Firmware | ||
| Siemens SCALANCE XC206-2G PoE EEC (54V DC) Firmware | ||
| Siemens Siplus Net Scalance XC206-2SFP | ||
| Siemens Scalance XC206-2SFP EEC Firmware | ||
| Siemens SCALANCE XC206-2SFP G | ||
| Siemens Siplus Net Scalance XC206-2SFP | ||
| Siemens Scalance XC206-2SFP G (E/IP) Firmware | ||
| Siemens Scalance XC206-2SFP G (E/IP) | ||
| Siemens Siplus Net Scalance XC206-2SFP Firmware | ||
| Siemens Scalance XC206-2SFP G EEC Firmware | ||
| Siemens Siplus Net Scalance XC208 Firmware | ||
| Siemens Siplus Net Scalance XC208 | ||
| Siemens SCALANCE XC208 EEC Firmware | ||
| Siemens SCALANCE XC208G Firmware | ||
| Siemens SCALANCE XC208G Firmware | ||
| Siemens SCALANCE XC208G PoE | ||
| Siemens Scalance XC208G (E/IP) Firmware | ||
| Siemens Scalance XC208G (E/IP) | ||
| Siemens SCALANCE XC208G (EIP DEF.) | ||
| Siemens Scalance XC208G (E/IP) | ||
| Siemens SCALANCE XC208G Firmware | ||
| Siemens SCALANCE XC208G PoE | ||
| Siemens Scalance XC216EEC Firmware | ||
| Siemens SCALANCE XC216-3G PoE (54 V DC) | ||
| Siemens SCALANCE XC216-4C G Firmware | ||
| Siemens Scalance XC216-4C Firmware | ||
| Siemens Scalance XC216-4C G (E/IP) Firmware | ||
| Siemens Scalance XC216-4C G (E/IP) | ||
| Siemens Scalance XC216-4C G (E/IP) | ||
| Siemens Scalance XC216-4C G (E/IP) | ||
| Siemens Scalance XC216-4C G EEC | ||
| Siemens Scalance XC216-4C Firmware | ||
| Siemens Scalance XC216EEC | ||
| Siemens Scalance XC216EEC Firmware | ||
| Siemens Scalance Xc224 Firmware | ||
| Siemens SCALANCE XC224-4C G | ||
| Siemens Scalance XC224-4C G EEC Firmware | ||
| Siemens Scalance XC224-4C G (E/IP) | ||
| Siemens Scalance XC224-4C G (E/IP) Firmware | ||
| Siemens Scalance XC224-4C G (E/IP) | ||
| Siemens Scalance XC224-4C G (E/IP) Firmware | ||
| Siemens Scalance XC224-4C G (E/IP) Firmware | ||
| Siemens Scalance XF-200BA Firmware | ||
| Siemens SCALANCE XF-200BA | ||
| Siemens Scalance XF204-2BA DNA | ||
| Siemens Scalance XF204-2BA DNA | ||
| Siemens SCALANCE XF204-2BA IRT Firmware | ||
| Siemens Scalance XF204-2BA IRT | ||
| Siemens Scalance XM-400 Firmware | ||
| Siemens Scalance XM-400 | ||
| Siemens Scalance XM408-4C L3 Firmware | ||
| Siemens Scalance XM408-4C L3 | ||
| Siemens Scalance XM408-4C L3 | ||
| Siemens Scalance XM408-4C L3 Firmware | ||
| Siemens Scalance XM408-8C L3 | ||
| Siemens Scalance XM408-8C L3 | ||
| Siemens Scalance XM408-8C L3 | ||
| Siemens Scalance XM408-8C | ||
| Siemens SCALANCE XM416-4C L3 Firmware | ||
| Siemens Scalance XM416-4C Firmware | ||
| Siemens Scalance XM416-4C Firmware | ||
| Siemens SCALANCE XM416-4C L3 Firmware | ||
| Siemens Scalance XP-200 Firmware | ||
| Siemens SCALANCE XP-200 | ||
| Siemens SCALANCE XP208 (Ethernet/IP) | ||
| Siemens Scalance XP208 (EIP) | ||
| Siemens Scalance XP208 (EIP) Firmware | ||
| Siemens Scalance XP208 (EIP) | ||
| Siemens Scalance XP208EEC | ||
| Siemens SCALANCE XP208PoE EEC | ||
| Siemens SCALANCE XP208PoE EEC | ||
| Siemens SCALANCE XP208PoE EEC Firmware | ||
| Siemens Scalance XP216 (EIP) Firmware | ||
| Siemens Scalance XP216 (EIP) Firmware | ||
| Siemens Scalance XP216 (EIP) Firmware | ||
| Siemens Scalance XP216 (EIP) | ||
| Siemens Scalance XP216EEC | ||
| Siemens Scalance XP216EEC Firmware | ||
| Siemens Scalance XP216PoE EEC | ||
| Siemens Scalance XP216PoE EEC Firmware | ||
| Siemens Scalance XR-300PoE | ||
| Siemens Scalance XR-300 Series | ||
| Siemens Scalance XR-300 Series | ||
| Siemens Scalance XR-300EEC Firmware | ||
| Siemens Scalance XR-300PoE | ||
| Siemens Scalance XR-300 Series | ||
| Siemens SCALANCE XR300-WG firmware | ||
| Siemens SCALANCE X-300WG | ||
| Siemens Scalance XR324-12M | ||
| Siemens SCALANCE XR324-12M | ||
| Siemens Scalance XR324-12M TS | ||
| Siemens SCALANCE XR324-12M | ||
| Siemens SCALANCE XR324-4M EEC | ||
| Siemens Scalance XR324-4M EEC Firmware | ||
| Siemens SCALANCE XR324-4M PoE | ||
| Siemens SCALANCE XR324-4M EEC | ||
| Siemens Scalance XR324-4M PoE TS | ||
| Siemens SCALANCE XR324-4M PoE TS | ||
| Siemens Scalance XR324WG Firmware | ||
| Siemens Scalance XR324WG Firmware | ||
| Siemens Scalance XR326-2C POE WG | ||
| Siemens SCALANCE XR326-2C PoE WG | ||
| Siemens SCALANCE XR328-4C WG | ||
| Siemens SCALANCE XR328-4C WG | ||
| Siemens SCALANCE XR-500 Firmware | ||
| Siemens SCALANCE XR-500 Firmware | ||
| Siemens Scalance XR524 | ||
| Siemens Scalance XR524-8C | ||
| Siemens Scalance XR524-8C | ||
| Siemens Scalance XR524 | ||
| Siemens Scalance XR524-8C L3 | ||
| Siemens Scalance XR524-8C | ||
| Siemens Scalance XR526-8C Firmware | ||
| Siemens Scalance XR526-8C Firmware | ||
| Siemens Scalance XR526-8C L3 Firmware | ||
| Siemens Scalance XR526-8C Firmware | ||
| Siemens Scalance XR526-8C Firmware | ||
| Siemens Scalance XR526-8C L3 Firmware | ||
| Siemens Scalance XR528-6M Firmware | ||
| Siemens Scalance XR528-6M Firmware | ||
| Siemens Scalance XR528-6M L3 | ||
| Siemens Scalance XR528-6M 2HR2 Firmware | ||
| Siemens Scalance XR528-6M | ||
| Siemens Scalance XR528-6M 2HR2 Firmware | ||
| Siemens Scalance XR528-6M 2HR2 Firmware | ||
| Siemens Scalance XR528-6M 2HR2 Firmware | ||
| Siemens Scalance XR528-6M L3 | ||
| Siemens Scalance XR528-6M | ||
| Siemens Scalance XR552-12 Firmware | ||
| Siemens Scalance XR552-12 | ||
| Siemens Scalance XR552 Firmware | ||
| Siemens Scalance XR552 Firmware | ||
| Siemens Scalance XR552 Firmware | ||
| Siemens Scalance XR552 Firmware | ||
| Siemens Scalance XR552 Firmware | ||
| Siemens Scalance XR552 | ||
| Siemens Scalance XR552-12M 2HR2 Firmware | ||
| Siemens Scalance XR552-12M Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-36325?
CVE-2022-36325 is classified as a medium to high severity vulnerability due to its potential for code injection and execution.
How do I fix CVE-2022-36325?
To mitigate CVE-2022-36325, ensure that you update the affected Siemens SCALANCE devices to the latest firmware version that addresses this vulnerability.
What type of vulnerability is CVE-2022-36325?
CVE-2022-36325 is a DOM-based cross-site scripting (XSS) vulnerability caused by improper data sanitization in the web interface.
Who is affected by CVE-2022-36325?
Only authenticated remote attackers with administrative privileges can exploit CVE-2022-36325 on affected Siemens SCALANCE devices.
What devices are affected by CVE-2022-36325?
CVE-2022-36325 affects various Siemens SCALANCE devices, particularly those with specific firmware versions that do not properly sanitize user input.
- agent/type
- agent/weakness
- agent/author
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens scalance m-800
- canonical/siemens scalance m-800 firmware
- canonical/siemens scalance s615 eec firmware
- canonical/siemens scalance s615 firmware
- canonical/siemens scalance s602 firmware
- canonical/siemens scalance sc-600 family
- canonical/siemens scalance sc622-2c firmware
- canonical/siemens scalance sc632-2c firmware
- canonical/siemens scalance sc636-2c
- canonical/siemens scalance sc642-2c
- canonical/siemens scalance sc646-2c firmware
- canonical/siemens scalance sc646-2c (6gk5646-2gs00-2ac2)
- canonical/siemens scalance w700 firmware
- canonical/siemens scalance w700
- canonical/siemens scalance w-700 ieee 802.11n family
- canonical/siemens scalance w700 series firmware
- canonical/siemens scalance w700 ieee 802.11ac firmware
- canonical/siemens scalance xb-200 firmware
- canonical/siemens scalance xb-200
- canonical/siemens scalance xb205-3 (st, pn) firmware
- canonical/siemens scalance xb205-3 (sc, pn)
- canonical/siemens scalance xb205-3ld
- canonical/siemens scalance xb208
- canonical/siemens scalance xb213-3
- canonical/siemens scalance xb213-3 (st, pn) firmware
- canonical/siemens scalance xb213-3ld firmware
- canonical/siemens scalance xb216
- canonical/siemens scalance xc-200 firmware
- canonical/siemens scalance xc-200
- canonical/siemens scalance xc206-2 firmware
- canonical/siemens scalance xc206-2sfp g (eip def.) firmware
- canonical/siemens scalance xc206-2g poe
- canonical/siemens scalance xc206-2g poe (54 v dc)
- canonical/siemens scalance xc206-2g poe (54 v dc) firmware
- canonical/siemens scalance xc206-2g poe eec (54v dc) firmware
- canonical/siemens siplus net scalance xc206-2sfp
- canonical/siemens scalance xc206-2sfp eec firmware
- canonical/siemens scalance xc206-2sfp g
- canonical/siemens scalance xc206-2sfp g (e/ip) firmware
- canonical/siemens scalance xc206-2sfp g (e/ip)
- canonical/siemens siplus net scalance xc206-2sfp firmware
- canonical/siemens scalance xc206-2sfp g eec firmware
- canonical/siemens siplus net scalance xc208 firmware
- canonical/siemens siplus net scalance xc208
- canonical/siemens scalance xc208 eec firmware
- canonical/siemens scalance xc208g firmware
- canonical/siemens scalance xc208g poe
- canonical/siemens scalance xc208g (e/ip) firmware
- canonical/siemens scalance xc208g (e/ip)
- canonical/siemens scalance xc208g (eip def.)
- canonical/siemens scalance xc216eec firmware
- canonical/siemens scalance xc216-3g poe (54 v dc)
- canonical/siemens scalance xc216-4c g firmware
- canonical/siemens scalance xc216-4c firmware
- canonical/siemens scalance xc216-4c g (e/ip) firmware
- canonical/siemens scalance xc216-4c g (e/ip)
- canonical/siemens scalance xc216-4c g eec
- canonical/siemens scalance xc216eec
- canonical/siemens scalance xc224 firmware
- canonical/siemens scalance xc224-4c g
- canonical/siemens scalance xc224-4c g eec firmware
- canonical/siemens scalance xc224-4c g (e/ip)
- canonical/siemens scalance xc224-4c g (e/ip) firmware
- canonical/siemens scalance xf-200ba firmware
- canonical/siemens scalance xf-200ba
- canonical/siemens scalance xf204-2ba dna
- canonical/siemens scalance xf204-2ba irt firmware
- canonical/siemens scalance xf204-2ba irt
- canonical/siemens scalance xm-400 firmware
- canonical/siemens scalance xm-400
- canonical/siemens scalance xm408-4c l3 firmware
- canonical/siemens scalance xm408-4c l3
- canonical/siemens scalance xm408-8c l3
- canonical/siemens scalance xm408-8c
- canonical/siemens scalance xm416-4c l3 firmware
- canonical/siemens scalance xm416-4c firmware
- canonical/siemens scalance xp-200 firmware
- canonical/siemens scalance xp-200
- canonical/siemens scalance xp208 (ethernet/ip)
- canonical/siemens scalance xp208 (eip)
- canonical/siemens scalance xp208 (eip) firmware
- canonical/siemens scalance xp208eec
- canonical/siemens scalance xp208poe eec
- canonical/siemens scalance xp208poe eec firmware
- canonical/siemens scalance xp216 (eip) firmware
- canonical/siemens scalance xp216 (eip)
- canonical/siemens scalance xp216eec
- canonical/siemens scalance xp216eec firmware
- canonical/siemens scalance xp216poe eec
- canonical/siemens scalance xp216poe eec firmware
- canonical/siemens scalance xr-300poe
- canonical/siemens scalance xr-300 series
- canonical/siemens scalance xr-300eec firmware
- canonical/siemens scalance xr300-wg firmware
- canonical/siemens scalance x-300wg
- canonical/siemens scalance xr324-12m
- canonical/siemens scalance xr324-12m ts
- canonical/siemens scalance xr324-4m eec
- canonical/siemens scalance xr324-4m eec firmware
- canonical/siemens scalance xr324-4m poe
- canonical/siemens scalance xr324-4m poe ts
- canonical/siemens scalance xr324wg firmware
- canonical/siemens scalance xr326-2c poe wg
- canonical/siemens scalance xr328-4c wg
- canonical/siemens scalance xr-500 firmware
- canonical/siemens scalance xr524
- canonical/siemens scalance xr524-8c
- canonical/siemens scalance xr524-8c l3
- canonical/siemens scalance xr526-8c firmware
- canonical/siemens scalance xr526-8c l3 firmware
- canonical/siemens scalance xr528-6m firmware
- canonical/siemens scalance xr528-6m l3
- canonical/siemens scalance xr528-6m 2hr2 firmware
- canonical/siemens scalance xr528-6m
- canonical/siemens scalance xr552-12 firmware
- canonical/siemens scalance xr552-12
- canonical/siemens scalance xr552 firmware
- canonical/siemens scalance xr552
- canonical/siemens scalance xr552-12m 2hr2 firmware
- canonical/siemens scalance xr552-12m firmware