Lucene search
SiemensCVELIST:CVE-2022-46350HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-46350
2022-12-1300:00:00
CWE-80
siemens
www.cve.org
cross-site scripting
scalance x204rna
scalance x204rna eec
v3.2.7
web server
malicious request
vulnerability
0.001 Low
EPSS
Percentile
30.7%
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.
CNA Affected
[
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA (HSR)",
"versions": [
{
"version": "All versions < V3.2.7",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA (PRP)",
"versions": [
{
"version": "All versions < V3.2.7",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (HSR)",
"versions": [
{
"version": "All versions < V3.2.7",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (PRP)",
"versions": [
{
"version": "All versions < V3.2.7",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SCALANCE X204RNA EEC (PRP/HSR)",
"versions": [
{
"version": "All versions < V3.2.7",
"status": "affected"
}
]
}
]Related
prion
prion
Cross site scripting
2022-12-13 16:15:00
cnvd
cnvd
Siemens SCALANCE X-200RNA Switch Devices Cross-Site Scripting Vulnerability
2022-12-14 00:00:00
nessus
nessus
nvd
nvd
CVE-2022-46350
2022-12-13 16:15:25
cve
cve
CVE-2022-46350
2022-12-13 16:15:25
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-15 12:00:00