CVE-2022-46353criticalCWE-330

CVE-2022-46353: falha crítica em Siemens SCALANCE X204RNA (HSR)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SCALANCE X204RNA+ Monitorar SCALANCE X204RNA EEC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.1%
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of affected devices calculates session ids and nonces in an insecure manner. This could allow an unauthenticated remote attacker to brute-force session ids and hijack existing sessions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Siemens · SCALANCE X204RNA EEC (HSR)Siemens · SCALANCE X204RNA EEC (PRP)Siemens · SCALANCE X204RNA EEC (PRP/HSR)Siemens · SCALANCE X204RNA (HSR)Siemens · SCALANCE X204RNA (PRP)
CVEs relacionadas — Siemens SCALANCE X204RNA (HSR)

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13933—CVE-2019-13933EPSS 1.4%CVE-2019-10942—CVE-2019-10942EPSS 1.4%CVE-2022-46354MEDIUMCVE-2022-46354EPSS 0.7%CVE-2022-46352HIGHCVE-2022-46352EPSS 0.7%CVE-2022-46355HIGHCVE-2022-46355EPSS 0.6%CVE-2022-46350MEDIUMCVE-2022-46350EPSS 0.5%