Read the docs
TI-2022-09329 Aliases CVE-2022-25755GHSA-vj95-2482-p3v4

Improper access control in Siemens SCALANCE X302-7 EEC

Priority LOW 36CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.

Why it matters now

EPSS 0.01329 71st percentileScored 2026-11-07
Fix Fixed SCALANCE X302-7 EEC (230V) (Siemens): V4.1.4SCALANCE X302-7 EEC (230V, coated) (Siemens): V4.1.4+49 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X302-7 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X304-2FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X306-1LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1 FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1-2LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X408-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSIPLUS NET SCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
  • SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X304-2FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1 FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X408-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-25755
  2. 2026-10-03 Alias added: GHSA-vj95-2482-p3v4

References

  • TI-2020-17228 Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET… CVSS 4.0HIGH 8.7
  • TI-2022-09326 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC… CVSS 3.1CRITICAL 9.8
  • TI-2022-09327 Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
  • TI-2022-09328 Cross-site request forgery in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
  • TI-2022-09713 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
  • TI-2022-09712 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
See all 9 →

Sources