Read the docs
TI-2022-09751 Aliases CVE-2022-26380GHSA-jwr7-6733-ghp8

Out-of-bounds read in Siemens SCALANCE X302-7 EEC

Priority LOW 35CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate if a certain SNMP key exists. An attacker could use this to trigger a reboot of an affected device by requesting specific SNMP information from the device.

Why it matters now

EPSS 0.00947 61st percentileScored 2026-11-07
Fix Fixed SCALANCE X302-7 EEC (230V) (Siemens): V4.1.4SCALANCE X302-7 EEC (230V, coated) (Siemens): V4.1.4+49 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE X302-7 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X302-7 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X304-2FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X306-1LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 230V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-2 EEC (2x 24V, coated)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X307-3LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LDbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LHbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2LH+before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2Mbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M PoEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X308-2M TSbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X310FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1 FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X320-1-2LD FEbefore V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE X408-2before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-12M TS (24V)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)before V4.1.4V4.1.4Patch availableCNA
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)before V4.1.4V4.1.4Patch availableCNA
SiemensSIPLUS NET SCALANCE X308-2before V4.1.4V4.1.4Patch availableCNA
  • SCALANCE X302-7 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X302-7 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X304-2FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X306-1LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 230V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-2 EEC (2x 24V, coated) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X307-3LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LD VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2LH+ VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M PoE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X308-2M TS VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X310FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1 FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X320-1-2LD FE VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE X408-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-12M TS (24V) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M EEC (2x 24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (230V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE (24V, ports on rear) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SCALANCE XR324-4M PoE TS (24V, ports on front) VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA
  • SIPLUS NET SCALANCE X308-2 VendorSiemens Affected before V4.1.4 Fixed in V4.1.4 Patch available CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x302-7eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x302-7eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x304-2fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x304-2fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x306-1ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-2eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-2eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x307-3_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:*before 4.1.4VulnerableSiemens
cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:scalance_x307-3ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x307-3ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2ld_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2lh\+_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2lh\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x308-2m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x310fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x310fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1fe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1fe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_x408-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_x408-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SCALANCE X302-7 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X302-7 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X304-2FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X306-1LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 230V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-2 EEC (2x 24V, coated) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X307-3LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LD (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2LH+ (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M PoE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X308-2M TS (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X310FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1 FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X320-1-2LD FE (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE X408-2 (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-12M TS (24V) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M EEC (2x 24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (230V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE (24V, ports on rear) (Siemens) Fixed in V4.1.4
  • Fix · CNA SCALANCE XR324-4M PoE TS (24V, ports on front) (Siemens) Fixed in V4.1.4
  • Fix · CNA SIPLUS NET SCALANCE X308-2 (Siemens) Fixed in V4.1.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-26380
  2. 2026-10-03 Alias added: GHSA-jwr7-6733-ghp8

References

  • TI-2020-17228 Resource allocation without limits in Siemens Development/Evaluation Kits for PROFINET… CVSS 4.0HIGH 8.7
  • TI-2022-09326 A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC… CVSS 3.1CRITICAL 9.8
  • TI-2022-09327 Stack-based buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
  • TI-2022-09328 Cross-site request forgery in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 8.8
  • TI-2022-09713 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
  • TI-2022-09712 Buffer overflow in Siemens SCALANCE X302-7 EEC CVSS 3.1HIGH 7.5
See all 9 →

Sources