Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87966
HistoryDec 14, 2022 - 12:00 a.m.

Siemens SCALANCE X-200RNA Switch Devices has an unspecified vulnerability

2022-12-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
siemens
scalance x-200rna
switch devices
vulnerability
web server
session id
calculation
insecure manner
unauthenticated remote attacker
hijack
existing session
industrial ethernet access point
security vulnerability
parallel network

0.003 Low

EPSS

Percentile

68.9%

The SCALANCE X-204RNA Industrial Ethernet Access Point enables non-PRP endpoint devices to connect to a separate parallel network as needed.A security vulnerability exists in Siemens SCALANCE X-200RNA Switch Devices due to the web server of the affected device calculating session IDs and random numbers in an insecure manner, allowing an unauthenticated remote attacker to use the session ID and hijack an existing session.

0.003 Low

EPSS

Percentile

68.9%

Related for CNVD-2022-87966