Skip to content
OpenAdvisories
High ICSA-22-349-10 2 CVEs

Siemens APOGEE/TALON Field Panels

Published Dec 15, 2022 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: Calibre ICE Product: Mcenter Product: SCALANCE X-200RNA switch family Product: SICAM GridPass (6MD7711-2AA00-1EA0) Product: SIMATIC RTLS Locating Manager (6GT2780-0DA00)

Summary

Successful exploitation of this vulnerability could allow an attacker to hijack existing sessions or spoof future sessions.

Vulnerabilities 2

  • High 7.5
    CVE-2022-3602 Public exploit EPSS 91%

    X.509 Email Address 4-byte Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the ap…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 7.5
    CVE-2022-3786 Public exploit EPSS 92%

    X.509 Email Address Variable Length Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an appli…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Publication Date

References