Critical ICSA-23-103-09 10 CVEs

Siemens SCALANCE XCM332

Published Apr 11, 2023 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: SCALANCE XCM332 (6GK5332-0GA01-2AC2)

Summary

Multiple vulnerabilities in the third-party components cURL, BusyBox, libtirpc, Expat as well as in the Linux Kernel could allow an attacker to impact the SCALANCE XCM332 device's confidentiality, integrity and availability.

Siemens has released an update for the SCALANCE XCM332 and recommends to update to the latest version.

Vulnerabilities 10

Critical 9.8

CVE-2022-32207 EPSS 12%

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Jul 7, 2022
High 8.1

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Sep 14, 2022
High 7.8

CVE-2022-30065

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing …

busybox busybox busybox busybox Debian Azure Linux Alpine Wolfi

May 18, 2022
High 7.5

CVE-2021-46828

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc becaus…

libtirpc libtirpc ntirpc libtirpc Debian Ubuntu Alpine

Jul 20, 2022
Medium 6.5

CVE-2022-32206 EPSS 36%

curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple …

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Jul 7, 2022
Medium 5.9

CVE-2022-32208

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw make…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Jul 7, 2022
Medium 4.3

CVE-2022-32205 EPSS 31%

A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 st…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Jul 7, 2022
Low 3.7

CVE-2022-35252

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when …

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Sep 23, 2022
Unscored —

CVE-2022-1652

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-fr…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

May 31, 2022
Unscored —

CVE-2022-1729

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Sep 1, 2022

Revision history

2025-05-06 #2
Revision - Fixing typos
2023-04-11 #1
Publication Date

References

SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-558014.pdf
SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-558014.txt
ICS Advisory ICSA-23-103-09 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-09
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B