High ICSA-22-349-02 6 CVEs

Siemens SCALANCE X-200RNA Switch Devices

Published Dec 13, 2022 · Updated Dec 13, 2022

Vendor: Siemens Product: SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) Product: SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) Product: SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) Product: SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) Product: SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

Summary

SCALANCE X-200RNA switch devices before V3.2.7 contain multiple vulnerabilities that could allow an attacker to cause a denial of service condition, to extract sensitive information or to hijack existing sessions.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

Critical 9.8

CVE-2022-46353

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-46355

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
Medium 6.1

CVE-2022-46350

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
Medium 5.5

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) SCALANCE X204RNA (PRP) ICS / OT

Dec 13, 2022
Medium 5.3

CVE-2022-46354

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022

Revision history

2022-12-13 #1
Publication Date

References

SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-363821.txt
SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
ICS Advisory ICSA-22-349-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B