High SSA-363821 6 CVEs

SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7

Published Dec 13, 2022 · Updated Dec 13, 2022

Vendor: Siemens Product: SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) Product: SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) Product: SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) Product: SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) Product: SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

Summary

SCALANCE X-200RNA switch devices before V3.2.7 contain multiple vulnerabilities that could allow an attacker to cause a denial of service condition, to extract sensitive information or to hijack existing sessions.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

Critical 9.8

CVE-2022-46353

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
High 7.5

CVE-2022-46355

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
Medium 6.1

CVE-2022-46350

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022
Medium 5.5

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) SCALANCE X204RNA (PRP) ICS / OT

Dec 13, 2022
Medium 5.3

CVE-2022-46354

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT

Dec 13, 2022

Revision history

2022-12-13 #1
Publication Date

References

SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-363821.txt