Patch days / August 2022

Siemens ProductCERT Patch Day — August 2022

Tuesday, 9 August 2022

Vulnerabilities: 7
Critical: 1
High: 1
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

Critical 9.1
CVE-2022-36323 Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or sp…
EPSS 1.9%

All vulnerabilities 7

Critical1 Show

Critical 9.1
CVE-2022-36323 Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or sp…
EPSS 1.9%

High1 Show

High 7.5
CVE-2022-36324 Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute fo…
EPSS 1.8%

Medium5 Show