9.8
Critical
CVE-2022-46353 A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All…
Description
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SCALANCE X204RNA (HSR) | Versions not published | |
| SCALANCE X204RNA (PRP) | Versions not published | |
| SCALANCE X204RNA EEC (HSR) | Versions not published | |
| SCALANCE X204RNA EEC (PRP) | Versions not published | |
| SCALANCE X204RNA EEC (PRP/HSR) | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SCALANCE X204RNA (HSR)
The 11 CVEs of SCALANCE X204RNA (HSR) →
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2022-46355
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All…
7.5
High
CVE-2022-46354
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All…
5.3
Medium
CVE-2022-46350
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All…
6.1
Medium