Lucene search

[email protected]CVE-2022-36324

HistoryAug 10, 2022 - 12:15 p.m.

CVE-2022-36324

2022-08-1012:15:00

CWE-770

[email protected]

web.nvd.nist.gov

cve-2022-36324

ssl/tls

vulnerability

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.8%

JSON

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

CPENameOperatorVersion
siemens:scalance_m-800_firmwaresiemens scalance m-800 firmwareeq*
siemens:scalance_s615_firmwaresiemens scalance s615 firmwareeq*
siemens:scalance_w700_ieee_802.11ax_firmwaresiemens scalance w700 ieee 802.11ax firmwareeq*
siemens:scalance_w700_ieee_802.11n_firmwaresiemens scalance w700 ieee 802.11n firmwareeq*
siemens:scalance_w700_ieee_802.11ac_firmwaresiemens scalance w700 ieee 802.11ac firmwareeq*
siemens:scalance_xb-200_firmwaresiemens scalance xb-200 firmwareeq*
siemens:scalance_xb205-3_firmwaresiemens scalance xb205-3 firmwareeq*
siemens:scalance_xb205-3ld_firmwaresiemens scalance xb205-3ld firmwareeq*
siemens:scalance_xb208_firmwaresiemens scalance xb208 firmwareeq*
siemens:scalance_xb213-3_firmwaresiemens scalance xb213-3 firmwareeq*

CPE	Name	Operator	Version
siemens:scalance_m-800_firmware	siemens scalance m-800 firmware	eq	*
siemens:scalance_s615_firmware	siemens scalance s615 firmware	eq	*
siemens:scalance_w700_ieee_802.11ax_firmware	siemens scalance w700 ieee 802.11ax firmware	eq	*
siemens:scalance_w700_ieee_802.11n_firmware	siemens scalance w700 ieee 802.11n firmware	eq	*
siemens:scalance_w700_ieee_802.11ac_firmware	siemens scalance w700 ieee 802.11ac firmware	eq	*
siemens:scalance_xb-200_firmware	siemens scalance xb-200 firmware	eq	*
siemens:scalance_xb205-3_firmware	siemens scalance xb205-3 firmware	eq	*
siemens:scalance_xb205-3ld_firmware	siemens scalance xb205-3ld firmware	eq	*
siemens:scalance_xb208_firmware	siemens scalance xb208 firmware	eq	*
siemens:scalance_xb213-3_firmware	siemens scalance xb213-3 firmware	eq	*

Rows per page:

1-10 of 841

References

cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for CVE-2022-36324

prion1 nessus1 cnvd1 cvelist1 ics1