What is the severity of CVE-2022-46350?

CVE-2022-46350 has been classified with a medium severity level due to its potential impact on device integrity.

How do I fix CVE-2022-46350?

To resolve CVE-2022-46350, upgrade the firmware of affected devices to version 3.2.7 or later.

Which devices are affected by CVE-2022-46350?

CVE-2022-46350 affects all versions of SCALANCE X204RNA devices prior to version 3.2.7.

What vulnerabilities were introduced in versions before 3.2.7 for CVE-2022-46350?

CVE-2022-46350 introduces risks related to network stability and integrity in SCALANCE X204RNA devices.

What are the risks associated with CVE-2022-46350?

The risks associated with CVE-2022-46350 include potential device failures and exploitation by malicious actors.

Vulnerability/
CVE-2022-46350

medium

6.1

CWE

80 79

13/12/2022

21/11/2024

CVE-2022-46350: XSS

First published: Tue Dec 13 2022(Updated: )

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.

Credit: productcert@siemens.com productcert@siemens.com

Affected Software	Affected Version	How to fix
All of
Siemens 6GK5204-0BA00-2MB2	<3.2.7
Siemens 6GK5204-0BA00-2MB2 Firmware
All of
siemens 6gk5204-0ba00-2kb2	<3.2.7
Siemens 6GK5204-0BA00-2KB2 Firmware
All of
Siemens 6GK5204-0BS00-2NA3	<3.2.7
Siemens 6GK5204-0BS00-2NA3 Firmware
All of
Siemens 6GK5204-0BS00-3LA3	<3.2.7
Siemens 6GK5204-0BS00-3LA3 Firmware
All of
Siemens 6GK5204-0BS00-3PA3	<3.2.7
Siemens 6GK5204-0BS00-3PA3 Firmware
Siemens 6GK5204-0BA00-2MB2	<3.2.7
Siemens 6GK5204-0BA00-2MB2 Firmware
siemens 6gk5204-0ba00-2kb2	<3.2.7
Siemens 6GK5204-0BA00-2KB2 Firmware
Siemens 6GK5204-0BS00-2NA3	<3.2.7
Siemens 6GK5204-0BS00-2NA3 Firmware
Siemens 6GK5204-0BS00-3LA3	<3.2.7
Siemens 6GK5204-0BS00-3LA3 Firmware
Siemens 6GK5204-0BS00-3PA3	<3.2.7
Siemens 6GK5204-0BS00-3PA3 Firmware

Remedy

https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf

Never miss a vulnerability like this again

Reference Links

https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf

Frequently Asked Questions

What is the severity of CVE-2022-46350?
CVE-2022-46350 has been classified with a medium severity level due to its potential impact on device integrity.
How do I fix CVE-2022-46350?
To resolve CVE-2022-46350, upgrade the firmware of affected devices to version 3.2.7 or later.
Which devices are affected by CVE-2022-46350?
CVE-2022-46350 affects all versions of SCALANCE X204RNA devices prior to version 3.2.7.
What vulnerabilities were introduced in versions before 3.2.7 for CVE-2022-46350?
CVE-2022-46350 introduces risks related to network stability and integrity in SCALANCE X204RNA devices.
What are the risks associated with CVE-2022-46350?
The risks associated with CVE-2022-46350 include potential device failures and exploitation by malicious actors.

agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/remedy
agent/references
agent/description
agent/first-publish-date
agent/last-modified-date
agent/author
agent/event
agent/source
agent/weakness
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
vendor/siemens
canonical/siemens 6gk5204-0ba00-2mb2
canonical/siemens 6gk5204-0ba00-2mb2 firmware
canonical/siemens 6gk5204-0ba00-2kb2
canonical/siemens 6gk5204-0ba00-2kb2 firmware
canonical/siemens 6gk5204-0bs00-2na3
canonical/siemens 6gk5204-0bs00-2na3 firmware
canonical/siemens 6gk5204-0bs00-3la3
canonical/siemens 6gk5204-0bs00-3la3 firmware
canonical/siemens 6gk5204-0bs00-3pa3
canonical/siemens 6gk5204-0bs00-3pa3 firmware

Frequently Asked Questions

What is the severity of CVE-2022-46350?
CVE-2022-46350 has been classified with a medium severity level due to its potential impact on device integrity.
How do I fix CVE-2022-46350?
To resolve CVE-2022-46350, upgrade the firmware of affected devices to version 3.2.7 or later.
Which devices are affected by CVE-2022-46350?
CVE-2022-46350 affects all versions of SCALANCE X204RNA devices prior to version 3.2.7.
What vulnerabilities were introduced in versions before 3.2.7 for CVE-2022-46350?
CVE-2022-46350 introduces risks related to network stability and integrity in SCALANCE X204RNA devices.
What are the risks associated with CVE-2022-46350?
The risks associated with CVE-2022-46350 include potential device failures and exploitation by malicious actors.

CVE-2022-46350: XSS

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-46350?

How do I fix CVE-2022-46350?

Which devices are affected by CVE-2022-46350?

What vulnerabilities were introduced in versions before 3.2.7 for CVE-2022-46350?

What are the risks associated with CVE-2022-46350?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2022-46350?

How do I fix CVE-2022-46350?

Which devices are affected by CVE-2022-46350?

What vulnerabilities were introduced in versions before 3.2.7 for CVE-2022-46350?

What are the risks associated with CVE-2022-46350?