Siemens SCALANCE X Switch Devices Buffer Copy Without Checking Size of Input (CVE-2022-26648)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

CVE-2022-26648

Siemens SCALANCE X Switch devices are affected by CVE-2022-26648: a vulnerability where the GET parameter XNo is not properly validated, allowing an unauthenticated remote attacker to crash the device. Affected products include SCALANCE X200-4P IRT, X201-3P IRT/IRT PRO, X202-2IRT/IRT PRO, X204-2 ...