Critical SSA-836527 9 CVEs

SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices

Published Apr 12, 2022 · Updated Apr 12, 2022

Vendor: Siemens Product: SCALANCE X302-7 EEC (230V, coated) Product: SCALANCE X302-7 EEC (230V) Product: SCALANCE X302-7 EEC (24V, coated) Product: SCALANCE X302-7 EEC (24V) Product: SCALANCE X302-7 EEC (2x 230V, coated) Product: SCALANCE X302-7 EEC (2x 230V) Product: SCALANCE X302-7 EEC (2x 24V, coated) Product: SCALANCE X302-7 EEC (2x 24V) Product: SCALANCE X304-2FE Product: SCALANCE X306-1LD FE Product: SCALANCE X307-2 EEC (230V, coated) Product: SCALANCE X307-2 EEC (230V) Product: SCALANCE X307-2 EEC (24V, coated) Product: SCALANCE X307-2 EEC (24V) Product: SCALANCE X307-2 EEC (2x 230V, coated) Product: SCALANCE X307-2 EEC (2x 230V) Product: SCALANCE X307-2 EEC (2x 24V, coated) Product: SCALANCE X307-2 EEC (2x 24V) Product: SCALANCE X307-3 Product: SCALANCE X307-3LD Product: SCALANCE X308-2 Product: SCALANCE X308-2LD Product: SCALANCE X308-2LH Product: SCALANCE X308-2M Product: SCALANCE X308-2M PoE Product: SCALANCE X308-2M TS Product: SCALANCE X310 Product: SCALANCE X310FE Product: SCALANCE X320-1 FE +21 more

Summary

Several SCALANCE X-300 switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial of service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 9

Unscored —

CVE-2022-25751

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V) SCALANCE X302-7 EEC (230V, coated) SCALANCE X306-1LD FE ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25752

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X307-2 EEC (230V, coated) SCALANCE X302-7 EEC (24V) SCALANCE X302-7 EEC (2x 230V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25753

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V, coated) SCALANCE X304-2FE SCALANCE X302-7 EEC (230V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25754

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 230V, coated) SCALANCE X302-7 EEC (2x 24V, coated) SCALANCE X304-2FE ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25755

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (24V) SCALANCE X302-7 EEC (2x 230V) SCALANCE X302-7 EEC (2x 24V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-25756

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (230V, coated) SCALANCE X306-1LD FE SCALANCE X302-7 EEC (24V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26334

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 230V) SCALANCE X302-7 EEC (2x 24V) SCALANCE X302-7 EEC (230V, coated) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26335

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X306-1LD FE SCALANCE X302-7 EEC (24V, coated) SCALANCE X307-2 EEC (230V) ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-26380

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 …

Siemens SCALANCE X302-7 EEC (2x 24V, coated) SCALANCE X304-2FE SCALANCE X302-7 EEC (230V) ICS / OT

Apr 12, 2022

Revision history

2022-04-12 #1
Publication Date

References

SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf
SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-836527.txt