{"containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2023-04-11T09:02:19.204Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions."}], "affected": [{"vendor": "Siemens", "product": "SCALANCE X200-4P IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X201-3P IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X201-3P IRT PRO", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X202-2IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X202-2IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X202-2P IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X202-2P IRT PRO", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204-2", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204-2FM", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204-2LD", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204-2LD TS", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204-2TS", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X204IRT PRO", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X206-1", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X206-1LD", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X208", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X208PRO", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X212-2", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X212-2LD", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X216", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE X224", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF201-3P IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF202-2P IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF204", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF204-2", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF204-2BA IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF204IRT", "versions": [{"version": "All versions < V5.5.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF206-1", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SCALANCE XF208", "versions": [{"version": "All versions < V5.2.6", "status": "affected"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-330", "description": "CWE-330: Use of Insufficiently Random Values", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T05:11:43.345Z"}, "title": "CVE Program Container", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf", "tags": ["x_transferred"]}]}]}, "cveMetadata": {"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2022-26647", "datePublished": "2022-07-12T10:06:32", "dateReserved": "2022-03-07T00:00:00", "dateUpdated": "2024-08-03T05:11:43.345Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D98140A2-BA47-4E55-A796-FAC211B35CA9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B9CBC72-92D9-4B3A-884F-33124C457016", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F45960F-8E24-497B-86D3-40816FDAFCAE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "3268CF75-6DAB-416A-B19B-2A8F95C268CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E81C7358-632C-47AC-A2D2-F3C390CC452A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "492E8AC1-338B-4AC3-90C7-1FADCD4528C4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46CDE701-7989-4CB3-9E32-F802CD9F72B8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A8B1D979-038F-42F4-AB7D-E0664D051B4E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "11AEF3D6-96B0-431F-A664-E8E281CDA61C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "CEB62730-E759-455A-A308-F9DB084B35B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "70610406-76B7-47E6-A389-622074C72617", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4726901-34BF-4F70-80A6-71648A4A29FB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AA7CC15F-1CC5-414E-A243-9C9C35F954CF", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E38CE5A4-3EB1-4E93-BEB7-520E08DA6720", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC81E9A8-2FED-4E24-B1D3-85E4E5032FA9", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FCBC784-8EA0-4C6C-B504-DFC164028E4B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8AB41E26-CBC9-4244-9CD3-0EC9D65C5087", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*", "matchCriteriaId": "2BE27611-53E7-4162-8630-5BC334B02E37", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DE711C34-E9F1-46C8-B52E-F1833306E968", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FDEBD6B-6BE4-4FAD-A4E6-BE762595434D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB964676-5A88-460D-AFF5-EEFE4EE9D135", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5FFC1E9-4326-4F41-A86A-C52AB6A9A674", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "526B5B4E-4482-4CD4-AE7C-120CC08FB74E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "6716DCDE-BD3F-4BA2-A66A-A0C14C6A3C15", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "23DA897E-DEF8-4A49-8EEB-07FBB82061F4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x204irt_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "1769DB7A-F832-4D89-8ED0-8677F750059D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48DBE5A6-DF82-4383-B9D3-4A7334F569D8", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A5BB0F2-DD4C-4AB4-9B8F-B2501B239080", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A105670-E8C6-4C69-B4EF-EB4B56DC8D30", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DFF7FB7-774B-45ED-8400-951230DF0511", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "02394BC6-4048-4ADC-9878-E20CBE2D9F78", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3B574E2-F7BA-496B-887C-D25F386AA5E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "55201B05-1A02-4D54-85A0-586D23E10E6D", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2C9BA52-59BD-49B2-B932-9A364D9E6365", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "83149C2D-F2FD-40A7-B2D0-85528E94DC05", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E716A4E-50A9-4C52-8DA9-098F7506F4B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B82FACB-B526-4EC6-9A29-2B0E1EA09AC4", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*", "matchCriteriaId": "C08CDEE3-43EB-475E-8571-6E12824714FD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C526C0C4-3AFD-4945-B296-2AFA9D52ED6C", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0C4BAB5-E161-4B59-8A8C-369C7852A66E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "34CD00B1-8169-49DB-B842-F0C6D70BBCD8", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2203895-BC4E-4B2F-9110-C2CD88A121F2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3C4E4AA9-CDFF-4742-8680-79711FBE865D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "41614C70-97B4-44C8-A441-530A413A26F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08E037EF-75CD-4A27-96BC-7DAF113A7BE5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "6751FB7D-C72C-4321-B535-5880FE696FC3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA7D8017-DB9B-4396-8ABD-134AE7522577", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F1AE867-67B4-4871-BF56-88017533A737", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2DB0658D-EB75-4B33-B840-82895017EB81", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "69285324-4C0B-4BDC-B60D-F653679DD52D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4F316894-3BBB-4B72-8636-23868BF557AB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "99E6AFAA-B903-47BB-B0F3-7650B039C0FB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A192C830-E846-42FE-9AD2-1AAECDE1FCE3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf204irt:-:*:*:*:*:*:*:*", "matchCriteriaId": "57E5489B-277A-4D02-B4AB-4DB65969EED2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C0493014-8AEF-477F-BC42-8B801B836F15", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "2B40D2EB-5C69-47FA-801B-DC48407D418C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC0B21DF-5104-4EE5-B3C7-BFBB5DB1DC7C", "versionEndExcluding": "5.2.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*", "matchCriteriaId": "898613B2-4A9D-44B9-A3FC-4347A2AD7CAB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en SCALANCE X200-4P IRT (Todas las versiones), SCALANCE X200-4P IRT (Todas las versiones), SCALANCE X201-3P IRT (Todas las versiones), SCALANCE X201-3P IRT (Todas las versiones), SCALANCE X201-3P IRT PRO (Todas las versiones) SCALANCE X202-2IRT (Todas las versiones), SCALANCE X202-2IRT (Todas las versiones), SCALANCE X202-2P IRT (Todas las versiones), SCALANCE X202-2P IRT (Todas las versiones), SCALANCE X202-2P IRT PRO (Todas las versiones), SCALANCE X202-2P IRT PRO (Todas las versiones), SCALANCE X204-2 (Todas las versiones anteriores a V5. 2.6), SCALANCE X204-2FM (Todas las versiones anteriores a V5.2.6), SCALANCE X204-2LD (Todas las versiones anteriores a V5.2.6), SCALANCE X204-2LD TS (Todas las versiones anteriores a V5.2.6), SCALANCE X204-2TS (Todas las versiones anteriores a V5.2. 6), SCALANCE X204IRT (Todas las versiones), SCALANCE X204IRT (Todas las versiones), SCALANCE X204IRT PRO (Todas las versiones), SCALANCE X204IRT PRO (Todas las versiones), SCALANCE X206-1 (Todas las versiones anteriores a V5.2.6), SCALANCE X206-1LD (Todas las versiones anteriores a V5. 2.6), SCALANCE X208 (Todas las versiones anteriores a V5.2.6), SCALANCE X208PRO (Todas las versiones anteriores a V5.2.6), SCALANCE X212-2 (Todas las versiones anteriores a V5.2.6), SCALANCE X212-2LD (Todas las versiones anteriores a V5.2.6), SCALANCE X216 (Todas las versiones anteriores a V5. 2.6), SCALANCE X224 (Todas las versiones anteriores a V5.2.6), SCALANCE XF201-3P IRT (Todas las versiones), SCALANCE XF202-2P IRT (Todas las versiones), SCALANCE XF204 (Todas las versiones anteriores a V5.2.6), SCALANCE XF204-2 (Todas las versiones anteriores a V5. 2.6), SCALANCE XF204-2BA IRT (Todas las versiones), SCALANCE XF204IRT (Todas las versiones), SCALANCE XF204IRT (Todas las versiones), SCALANCE XF206-1 (Todas las versiones anteriores a V5.2.6), SCALANCE XF208 (Todas las versiones anteriores a V5.2.6). El servidor web de los dispositivos afectados calcula los identificadores de sesi\u00f3n y los nonces de forma no segura. Esto podr\u00eda permitir a un atacante remoto no autenticado forzar los identificadores de sesi\u00f3n y secuestrar las sesiones existentes"}], "id": "CVE-2022-26647", "lastModified": "2024-11-21T06:54:15.023", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "productcert@siemens.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Secondary"}]}, "published": "2022-07-12T10:15:10.257", "references": [{"source": "productcert@siemens.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-330"}], "source": "productcert@siemens.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-330"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}