CVE-2022-40631
Published: Oct 11, 2022
Modified: Aug 3, 2024
Description
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0), SCALANCE X202-2IRT (All versions < V5.5.0), SCALANCE X202-2P IRT (All versions < V5.5.0), SCALANCE X202-2P IRT PRO (All versions < V5.5.0), SCALANCE X204-2 (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X204IRT (All versions < V5.5.0), SCALANCE X204IRT PRO (All versions < V5.5.0), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < V5.5.0), SCALANCE XF202-2P IRT (All versions < V5.5.0), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204-2 (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < V5.5.0), SCALANCE XF204IRT (All versions < V5.5.0), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.0). There is a cross-site scripting vulnerability on the affected devices, that if used by a threat actor, it could result in session hijacking.
| Vendor | Product | Versions |
|---|---|---|
Siemens | SCALANCE X200-4P IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE X201-3P IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE X201-3P IRT PRO | affected All versions < V5.5.0 |
Siemens | SCALANCE X202-2IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE X202-2P IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE X202-2P IRT PRO | affected All versions < V5.5.0 |
Siemens | SCALANCE X204-2 | affected All versions < V5.2.5 |
Siemens | SCALANCE X204-2FM | affected All versions < V5.2.5 |
Siemens | SCALANCE X204-2LD | affected All versions < V5.2.5 |
Siemens | SCALANCE X204-2LD TS | affected All versions < V5.2.5 |
Siemens | SCALANCE X204-2TS | affected All versions < V5.2.5 |
Siemens | SCALANCE X204IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE X204IRT PRO | affected All versions < V5.5.0 |
Siemens | SCALANCE X206-1 | affected All versions < V5.2.5 |
Siemens | SCALANCE X206-1LD | affected All versions < V5.2.5 |
Siemens | SCALANCE X208 | affected All versions < V5.2.5 |
Siemens | SCALANCE X208PRO | affected All versions < V5.2.5 |
Siemens | SCALANCE X212-2 | affected All versions < V5.2.5 |
Siemens | SCALANCE X212-2LD | affected All versions < V5.2.5 |
Siemens | SCALANCE X216 | affected All versions < V5.2.5 |
Siemens | SCALANCE X224 | affected All versions < V5.2.5 |
Siemens | SCALANCE XF201-3P IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE XF202-2P IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE XF204 | affected All versions < V5.2.5 |
Siemens | SCALANCE XF204-2 | affected All versions < V5.2.5 |
Siemens | SCALANCE XF204-2BA IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE XF204IRT | affected All versions < V5.5.0 |
Siemens | SCALANCE XF206-1 | affected All versions < V5.2.5 |
Siemens | SCALANCE XF208 | affected All versions < V5.2.5 |
Siemens | SIPLUS NET SCALANCE X202-2P IRT | affected All versions < V5.5.0 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now