CVE-2022-46350

CVSS V2 None CVSS V3 None
Description
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.
Overview
  • CVE ID
  • CVE-2022-46350
  • Assigner
  • productcert@siemens.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-13T16:15:25
  • Last Modified Date
  • 2022-12-15T20:58:58
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:siemens:6gk5204-0ba00-2mb2_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.7
cpe:2.3:h:siemens:6gk5204-0ba00-2mb2:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:6gk5204-0ba00-2kb2_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.7
cpe:2.3:h:siemens:6gk5204-0ba00-2kb2:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:6gk5204-0bs00-2na3_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.7
cpe:2.3:h:siemens:6gk5204-0bs00-2na3:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:6gk5204-0bs00-3la3_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.7
cpe:2.3:h:siemens:6gk5204-0bs00-3la3:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:6gk5204-0bs00-3pa3_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.7
cpe:2.3:h:siemens:6gk5204-0bs00-3pa3:-:*:*:*:*:*:*:* 0 OR
References
History
Created Old Value New Value Data Type Notes
2022-12-13 16:18:31 Added to TrackCVE
2022-12-13 17:22:07 2022-12-13T16:15:25.667 2022-12-13T16:15:25 CVE Published Date updated
2022-12-13 17:22:07 2022-12-13T16:52:00 CVE Modified Date updated
2022-12-13 17:22:07 Received Awaiting Analysis Vulnerability Status updated
2022-12-15 16:18:08 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-15 21:14:02 2022-12-15T20:58:58 CVE Modified Date updated
2022-12-15 21:14:02 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-15 21:14:02 CWE-79 Weakness Enumeration new
2022-12-15 21:14:02 CPE Information updated