Lucene search

[email protected]CVE-2022-46354

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-46354

2022-12-1316:15:25

CWE-284

[email protected]

web.nvd.nist.gov

cve-2022-46354

vulnerability

scalance x204rna

scalance x204rna eec

webserver

security headers

remote attacker

nvd

information security

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.

Affected configurations

NVD

Node

siemens6gk5204-0ba00-2mb2_firmwareRange<3.2.7

AND

siemens6gk5204-0ba00-2mb2Match-

Node

siemens6gk5204-0ba00-2kb2_firmwareRange<3.2.7

AND

siemens6gk5204-0ba00-2kb2Match-

Node

siemens6gk5204-0bs00-2na3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-2na3Match-

Node

siemens6gk5204-0bs00-3la3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-3la3Match-

Node

siemens6gk5204-0bs00-3pa3_firmwareRange<3.2.7

AND

siemens6gk5204-0bs00-3pa3Match-

CPENameOperatorVersion
siemens:6gk5204-0ba00-2mb2_firmwaresiemens 6gk5204-0ba00-2mb2 firmwarelt3.2.7

CPE	Name	Operator	Version
siemens:6gk5204-0ba00-2mb2_firmware	siemens 6gk5204-0ba00-2mb2 firmware	lt	3.2.7

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE X204RNA EEC (PRP/HSR)",
    "versions": [
      {
        "version": "All versions < V3.2.7",
        "status": "affected"
      }
    ]
  }
]