Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-46353

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SCALANCE X204RNA (HSR)

  • All versions < V3.2.7affected

Siemens SCALANCE X204RNA (PRP)

  • All versions < V3.2.7affected

Siemens SCALANCE X204RNA EEC (HSR)

  • All versions < V3.2.7affected

Siemens SCALANCE X204RNA EEC (PRP)

  • All versions < V3.2.7affected

Siemens SCALANCE X204RNA EEC (PRP/HSR)

  • All versions < V3.2.7affected

References