Critical SSA-501891 1 CVE

SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families

Published Oct 11, 2022 · Updated Nov 8, 2022 · Revision 2

Summary

There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Unscored —

CVE-2022-40631

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions…

Siemens SCALANCE X202-2P IRT PRO SCALANCE X206-1LD SCALANCE X204-2FM ICS / OT

Oct 11, 2022

Revision history

2022-11-08 #2
Updated CVSS Vector
2022-10-11 #1
Publication Date

References

SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-501891.pdf
SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-501891.txt