Lucene search

K
cve[email protected]CVE-2022-31766
HistoryOct 11, 2022 - 11:15 a.m.

CVE-2022-31766

2022-10-1111:15:09
CWE-20
web.nvd.nist.gov
42
4
cve-2022-31766
vulnerability
ruggedcom
scalance
denial of service
nvd
security advisory

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (All versions < V7.1.2), SCALANCE M804PB (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex A) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (Annex B) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (All versions < V7.1.2), SCALANCE M874-2 (All versions < V7.1.2), SCALANCE M874-3 (All versions < V7.1.2), SCALANCE M876-3 (EVDO) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (All versions < V7.1.2), SCALANCE M876-4 (All versions < V7.1.2), SCALANCE M876-4 (EU) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (All versions < V7.1.2), SCALANCE S615 (All versions < V7.1.2), SCALANCE S615 EEC (All versions < V7.1.2), SCALANCE WAM763-1 (All versions >= V1.1.0 < V2.0), SCALANCE WAM766-1 (EU) (All versions >= V1.1.0 < V2.0), SCALANCE WAM766-1 (US) (All versions >= V1.1.0 < V2.0), SCALANCE WAM766-1 EEC (EU) (All versions >= V1.1.0 < V2.0), SCALANCE WAM766-1 EEC (US) (All versions >= V1.1.0 < V2.0), SCALANCE WUM763-1 (All versions >= V1.1.0 < V2.0), SCALANCE WUM763-1 (All versions >= V1.1.0 < V2.0), SCALANCE WUM766-1 (EU) (All versions >= V1.1.0 < V2.0), SCALANCE WUM766-1 (US) (All versions >= V1.1.0 < V2.0). Affected devices with TCP Event service enabled do not properly handle malformed packets.
This could allow an unauthenticated remote attacker to cause a denial of service condition and reboot the device thus possibly affecting other network resources.

Affected configurations

NVD
Node
siemensruggedcom_rm1224_firmwareRange<7.1.2
AND
siemensruggedcom_rm1224Match-
Node
siemensscalance_m804pb_firmwareRange<7.1.2
AND
siemensscalance_m804pbMatch-
Node
siemensscalance_m812-1_firmwareRange<7.1.2
AND
siemensscalance_m812-1Match-
Node
siemensscalance_m816-1_firmwareRange<7.1.2
AND
siemensscalance_m816-1Match-
Node
siemensscalance_m826-2_firmwareRange<7.1.2
AND
siemensscalance_m826-2Match-
Node
siemensscalance_m874-2_firmwareRange<7.1.2
AND
siemensscalance_m874-2Match-
Node
siemensscalance_m874-3_firmwareRange<7.1.2
AND
siemensscalance_m874-3Match-
Node
siemensscalance_m876-3_firmwareRange<7.1.2
AND
siemensscalance_m876-3Match-
Node
siemensscalance_m876-4_firmwareRange<7.1.2
AND
siemensscalance_m876-4Match-
Node
siemensscalance_mum853-1_firmwareRange<7.1.2
AND
siemensscalance_mum853-1Match-
Node
siemensscalance_mum856-1_firmwareRange<7.1.2
AND
siemensscalance_mum856-1Match-
Node
siemensscalance_s615_firmwareRange<7.1.2
AND
siemensscalance_s615Match-
Node
siemensscalance_wam763-1_firmwareRange1.1.0
AND
siemensscalance_wam763-1Match-
Node
siemensscalance_wam766-1_firmwareRange1.1.0
AND
siemensscalance_wam766-1Match-
Node
siemensscalance_wum763-1_firmwareRange1.1.0
AND
siemensscalance_wum763-1Match-
Node
siemensscalance_wum766-1_firmwareRange1.1.0
AND
siemensscalance_wum766-1Match-
Node
siemensscalance_wam766-1_firmwareRange1.1.0ecc
AND
siemensscalance_wam766-1Match-ecc

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RM1224 LTE(4G) EU",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M804PB",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M812-1 ADSL-Router (Annex A)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M812-1 ADSL-Router (Annex B)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M816-1 ADSL-Router (Annex A)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M816-1 ADSL-Router (Annex B)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M826-2 SHDSL-Router",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M874-2",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M874-3",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M876-3 (EVDO)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M876-3 (ROK)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M876-4",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M876-4 (EU)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE M876-4 (NAM)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE MUM853-1 (EU)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE MUM856-1 (EU)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE MUM856-1 (RoW)",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE S615",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE S615 EEC",
    "versions": [
      {
        "version": "All versions < V7.1.2",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WAM763-1",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WAM766-1 (EU)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WAM766-1 (US)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WAM766-1 EEC (EU)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WAM766-1 EEC (US)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WUM763-1",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WUM763-1",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WUM766-1 (EU)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE WUM766-1 (US)",
    "versions": [
      {
        "version": "All versions >= V1.1.0 < V2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Social References

More

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

Related for CVE-2022-31766