Read the docs
TI-2022-09327 Aliases CVE-2022-25753GHSA-4r64-87qc-pvvg

Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC

Priority MEDIUM 41CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device.

Why it matters now

EPSS 0.01701 77th percentileScored 2026-11-07
Fix Fixed SCALANCE X302-7 EEC (230V) (Siemens): V4.1.4SCALANCE X302-7 EEC (230V, coated) (Siemens): V4.1.4+49 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X302-7 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X304-2FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X306-1LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1 FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1-2LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X408-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSIPLUS NET SCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
  • SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X304-2FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1 FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X408-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-25753
  2. 2026-10-03 Alias added: GHSA-4r64-87qc-pvvg

References

  • TI-2020-17228 Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET… CVSS 4.0HIGH 8.7
  • TI-2022-09326 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC… CVSS 3.1CRITICAL 9.8
  • TI-2022-09328 Cross-site request forgery in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
  • TI-2022-09713 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
  • TI-2022-09712 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
  • TI-2022-09329 Improper access control in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
See all 9 →

Sources