CVE-2022-46354mediumCWE-284

CVE-2022-46354: falha de média gravidade em Siemens SCALANCE X204RNA (HSR)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SCALANCE X204RNA+ Monitorar SCALANCE X204RNA EEC

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.7%
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Siemens · SCALANCE X204RNA EEC (HSR)Siemens · SCALANCE X204RNA EEC (PRP)Siemens · SCALANCE X204RNA EEC (PRP/HSR)Siemens · SCALANCE X204RNA (HSR)Siemens · SCALANCE X204RNA (PRP)
CVEs relacionadas — Siemens SCALANCE X204RNA (HSR)

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13933—CVE-2019-13933EPSS 1.4%CVE-2019-10942—CVE-2019-10942EPSS 1.4%CVE-2022-46353CRITICALCVE-2022-46353EPSS 1.1%CVE-2022-46352HIGHCVE-2022-46352EPSS 0.7%CVE-2022-46355HIGHCVE-2022-46355EPSS 0.6%CVE-2022-46350MEDIUMCVE-2022-46350EPSS 0.5%