Cross-site scripting in Siemens SCALANCE X302-7 EEC
Priority LOW 28CWE-80Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-80.
Summary
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.
Why it matters now
EPSS 0.00562 46th percentileScored 2026-11-07
Fix Fixed SCALANCE X302-7 EEC (230V) (Siemens): V4.1.4SCALANCE X302-7 EEC (230V, coated) (Siemens): V4.1.4+49 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE X302-7 EEC (230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X302-7 EEC (2x 24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X304-2FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X306-1LD FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 230V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 230V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-2 EEC (2x 24V, coated) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X307-3LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LD | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH+ | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2LH+ | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M PoE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M PoE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M TS | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X308-2M TS | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X310FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X320-1 FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X320-1-2LD FE | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE X408-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M TS (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-12M TS (24V) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M EEC (2x 24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (230V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (230V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE (24V, ports on rear) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SCALANCE XR324-4M PoE TS (24V, ports on front) | before V4.1.4 | V4.1.4 | Patch available | CNA |
| Siemens | SIPLUS NET SCALANCE X308-2 | before V4.1.4 | V4.1.4 | Patch available | CNA |
- SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X304-2FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X320-1 FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE X408-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
- SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
CPE configurations NVD · 48
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 38 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:* | before 4.1.4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.4
- Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.4
- Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.4
Timeline
- 2026-10-02 Threatist record created from CVE-2022-25756
- 2026-10-03 Alias added: GHSA-cc95-9xf2-723h
References
More Siemens Scalance X302-7eec Firmware vulnerabilities
- TI-2020-17228 Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET… CVSS 4.0HIGH 8.7
- TI-2022-09326 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC… CVSS 3.1CRITICAL 9.8
- TI-2022-09327 Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
- TI-2022-09328 Cross-site request forgery in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
- TI-2022-09713 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
- TI-2022-09712 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
Sources
- CVE-2022-25756 · CVE Program
- CVE-2022-25756 · NVD
- FIRST EPSS
- GHSA-cc95-9xf2-723h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences