Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-25751

🗓️ 12 Apr 2022 09:07:43Reported by siemensType 
cvelist
 cvelist🔗 www.cve.org👁 20 Views

A vulnerability in SCALANCE X-series devices allows unauthenticated remote attackers to crash devices by exploiting improper validation of HTTP headers

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2022-25751
12 Apr 202209:15
–attackerkb
BDU FSTEC		The vulnerabilities of the microprogrammed software of industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, SCALANCE XR324-12M, and SIPLUS NET SCALANCE X308-2 are related to errors in handling HTTP headers. These vulnerabilities allow attackers to trigger service interruptions.
13 Jul 202200:00
–bdu_fstec
Circl		CVE-2022-25751
12 Apr 202212:23
–circl
CNNVD		多款 Siemens 产品输入验证错误漏洞
12 Apr 202200:00
–cnnvd
CNVD		Siemens SCALANCE X-300 Switch Family Devices输入验证错误漏洞
13 Apr 202200:00
–cnvd
CVE		CVE-2022-25751
12 Apr 202209:07
–cve
EUVD		EUVD-2022-30406
3 Oct 202520:07
–euvd
ICS		Siemens SCALANCE X-300 Switches
12 Apr 202200:00
–ics
NCSC		Vulnerabilities fixed in Siemens products
12 Apr 202200:00
–ncsc
NVD		CVE-2022-25751
12 Apr 202209:15
–nvd
Rows per page
[
  {
    "product": "SCALANCE X302-7 EEC (230V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (230V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (24V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (2x 230V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (2x 24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X304-2FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X306-1LD FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (230V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (230V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (24V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (2x 230V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (2x 24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-3LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X307-3LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LD",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LH",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LH",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LH+",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2LH+",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M PoE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M PoE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M TS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X308-2M TS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X310",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X310",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X310FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X310FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X320-1 FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X320-1-2LD FE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE X408-2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (230V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (230V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (230V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (230V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M (24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M TS (24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-12M TS (24V)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  },
  {
    "product": "SIPLUS NET SCALANCE X308-2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 Apr 2022 09:07Current
7.8High risk
Vulners AI Score7.8
EPSS0.01868
CWE-20
scalance x-seriesunauthenticated remote attackerimproper validationcrash devices
20