Lucene search

[email protected]CVE-2022-46351

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-46351

2022-12-1316:15:25

CWE-400

[email protected]

web.nvd.nist.gov

cve

2022

46351

scalance

x204rna

eec

profinet

dcp

denial of service

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

Affected configurations

NVD

Node

siemens6gk5204-0ba00-2mb2_firmwareRange<3.2.7

AND

siemens6gk5204-0ba00-2mb2Match-

Node

siemens6gk5204-0ba00-2kb2_firmwareRange<3.2.7

AND

siemens6gk5204-0ba00-2kb2Match-

Node

siemens6gk5204-0bs00-2na3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-2na3Match-

Node

siemens6gk5204-0bs00-3la3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-3la3Match-

Node

siemens6gk5204-0bs00-3pa3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-3pa3Match-

CPENameOperatorVersion
siemens:6gk5204-0ba00-2mb2_firmwaresiemens 6gk5204-0ba00-2mb2 firmwarelt3.2.7

CPE	Name	Operator	Version
siemens:6gk5204-0ba00-2mb2_firmware	siemens 6gk5204-0ba00-2mb2 firmware	lt	3.2.7

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP/HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  }
]