Read the docs
TI-2022-22788 Aliases CVE-2022-46144GHSA-p939-r66p-8wwm

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All…

Priority LOW 33CWE-664Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00928 60th percentileScored 2026-11-07
Fix Fixed SCALANCE SC622-2C (Siemens): V2.3, V3.0SCALANCE SC626-2C (Siemens): V2.3, V3.0+12 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSCALANCE SC622-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC622-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE SC626-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC626-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE SC632-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC632-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE SC636-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC636-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE SC642-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC642-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE SC646-2Cbefore V2.3V2.3Patch availableCNA
SiemensSCALANCE SC646-2CV2.3 to before V3.0V3.0Patch availableCNA
SiemensSCALANCE WAM763-1before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WAM766-1before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WAM766-1 (US)before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WAM766-1 EECbefore V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WAM766-1 EEC (US)before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WUM763-1before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WUM763-1before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WUM766-1before V2.0.0V2.0.0Patch availableCNA
SiemensSCALANCE WUM766-1 (USA)before V2.0.0V2.0.0Patch availableCNA
  • SCALANCE SC622-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC622-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE SC626-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC626-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE SC632-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC632-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE SC636-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC636-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE SC642-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC642-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE SC646-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
  • SCALANCE SC646-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
  • SCALANCE WAM763-1 VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WAM766-1 VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WAM766-1 (US) VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WAM766-1 EEC VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WAM766-1 EEC (US) VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WUM763-1 VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WUM763-1 VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WUM766-1 VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
  • SCALANCE WUM766-1 (USA) VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5622-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5626-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5632-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5636-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5642-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5622-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5626-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5632-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5636-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5642-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*2.3 to before 3.0VulnerableSiemens
cpe:2.3:h:siemens:6gk5646-2gs00-2ac2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*before 2.3VulnerableSiemens
  • cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions 2.3 to before 3.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5646-2gs00-2ac2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
  • cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
  • cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
  • cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
  • cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
  • cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens

Remediation

  • Fix · CNA SCALANCE SC622-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC622-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE SC626-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC626-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE SC632-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC632-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE SC636-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC636-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE SC642-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC642-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE SC646-2C (Siemens) Fixed in V2.3
  • Fix · CNA SCALANCE SC646-2C (Siemens) Fixed in V3.0
  • Fix · CNA SCALANCE WAM763-1 (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WAM766-1 (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WAM766-1 (US) (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WAM766-1 EEC (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WAM766-1 EEC (US) (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WUM763-1 (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WUM763-1 (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WUM766-1 (Siemens) Fixed in V2.0.0
  • Fix · CNA SCALANCE WUM766-1 (USA) (Siemens) Fixed in V2.0.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens SCALANCE SC622-2C, SCALANCE SC626-2C and 4 more products V2.3

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2022-22784 Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 31
    • TI-2022-22787 Affected devices do not check the TFTP blocksize correctly.Priority LOW 25
    • TI-2022-22786 Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 23
    Show all 4 records →
  • Release ·

    Siemens SCALANCE WAM763-1, SCALANCE WAM766-1 and 6 more products V2.0.0

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2022-22784 Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 31
    • TI-2022-22786 Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 23
    Show all 3 records →
Show 1 more group
  • Release ·

    Siemens SCALANCE SC622-2C, SCALANCE SC626-2C and 4 more products V3.0

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2022-22787 Affected devices do not check the TFTP blocksize correctly.Priority LOW 25
    • TI-2022-22786 Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 23
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-46144
  2. 2026-10-03 Alias added: GHSA-p939-r66p-8wwm

References

Patch 1

Other 2

  • TI-2022-13660 Missing authorization in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences