SSA-552702

Siemens Security Advisory by Siemens ProductCERT

SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products

Publication Date:	2022-10-11
Last Update:	2026-04-14
Current Version:	V1.6
CVSS v3.1 Base Score:	8.8

SUMMARY

The products listed below do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

KNOWN AFFECTED PRODUCTS

Un-/Collapse All

Affected Product and Versions	Remediation
SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)	Show more details
RUGGEDCOM RM1224 family (6GK6108-4AM00)	Show more details
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M-800 family	Show more details
SCALANCE M804PB (6GK5804-0AP00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M812-1 ADSL-Router family	Show more details
SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M816-1 ADSL-Router family	Show more details
SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M874-2 (6GK5874-2AA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M874-3 (6GK5874-3AA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-3 (6GK5876-3AA02-2BA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-4 (6GK5876-4AA10-2BA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM-800 family	Show more details
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE S615 family	Show more details
SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) All versions < V7.1.2 affected by CVE-2022-31765	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE SC-600 family	Show more details
SCALANCE SC622-2C (6GK5622-2GS00-2AC2) All versions < V3.0 affected by CVE-2022-31765	Update to V3.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814276/ See further recommendations from section Mitigations
SCALANCE SC632-2C (6GK5632-2GS00-2AC2) All versions < V3.0 affected by CVE-2022-31765	Update to V3.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814276/ See further recommendations from section Mitigations
SCALANCE SC636-2C (6GK5636-2GS00-2AC2) All versions < V3.0 affected by CVE-2022-31765	Update to V3.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814276/ See further recommendations from section Mitigations
SCALANCE SC642-2C (6GK5642-2GS00-2AC2) All versions < V3.0 affected by CVE-2022-31765	Update to V3.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814276/ See further recommendations from section Mitigations
SCALANCE SC646-2C (6GK5646-2GS00-2AC2) All versions < V3.0 affected by CVE-2022-31765	Update to V3.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109814276/ See further recommendations from section Mitigations
SCALANCE W-700 IEEE 802.11ax family	Show more details
SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) All versions < V2.0 affected by CVE-2022-31765	Update to V2.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE W-700 IEEE 802.11n family	Show more details
SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0) All versions < V6.6.0 affected by CVE-2022-31765	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W-1700 IEEE 802.11ac family	Show more details
SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) All versions affected by CVE-2022-31765	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG family	Show more details
SCALANCE XB-200 family	Show more details
SCALANCE XB205-3 (SC, PN) (6GK5205-3BB00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BB00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BD00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, PN) (6GK5205-3BD00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3LD (SC, E/IP) (6GK5205-3BF00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3LD (SC, PN) (6GK5205-3BF00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (SC, E/IP) (6GK5213-3BD00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (SC, PN) (6GK5213-3BD00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (ST, E/IP) (6GK5213-3BB00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (ST, PN) (6GK5213-3BB00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3LD (SC, E/IP) (6GK5213-3BF00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3LD (SC, PN) (6GK5213-3BF00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC-200 family	Show more details
SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208 (6GK5208-0BA00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208EEC (6GK5208-0BA00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G (6GK5208-0GA00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G EEC (6GK5208-0GA00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G PoE (6GK5208-0RA00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216 (6GK5216-0BA00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C (6GK5216-4BS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G (6GK5216-4GS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216EEC (6GK5216-0BA00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224 (6GK5224-0BA00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G (6GK5224-4GS00-2AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF-200BA family	Show more details
SCALANCE XF204 (6GK5204-0BA00-2GF2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204 DNA (6GK5204-0BA00-2YF2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204-2BA (6GK5204-2AA00-2GF2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP-200 family	Show more details
SCALANCE XP208 (6GK5208-0HA00-2AS6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208EEC (6GK5208-0HA00-2ES6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216 (6GK5216-0HA00-2AS6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216EEC (6GK5216-0HA00-2ES6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR-300WG family	Show more details
SCALANCE XR324WG (24 x FE, AC 230V) (6GK5324-0BA00-3AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR324WG (24 X FE, DC 24V) (6GK5324-0BA00-2AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (6GK5328-4FS00-3AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (6GK5328-4FS00-3RR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) (6GK5328-4FS00-2AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (6GK5328-4FS00-2RR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (28xGE, AC 230V) (6GK5328-4SS00-3AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (28xGE, DC 24V) (6GK5328-4SS00-2AR3) All versions < V4.4 affected by CVE-2022-31765	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XM-400/XR-500 family	Show more details
SCALANCE XM-400 family	Show more details
SCALANCE XM408-4C (6GK5408-4GP00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-8C (6GK5408-8GS00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM416-4C (6GK5416-4GS00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR-500 family	Show more details
SCALANCE XR524-8C, 1x230V (6GK5524-8GS00-3AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 1x230V (L3 int.) (6GK5524-8GR00-3AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 2x230V (6GK5524-8GS00-4AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 2x230V (L3 int.) (6GK5524-8GR00-4AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 24V (6GK5524-8GS00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 24V (L3 int.) (6GK5524-8GR00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 1x230V (6GK5526-8GS00-3AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 1x230V (L3 int.) (6GK5526-8GR00-3AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 2x230V (6GK5526-8GS00-4AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 2x230V (L3 int.) (6GK5526-8GR00-4AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 24V (6GK5526-8GS00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 24V (L3 int.) (6GK5526-8GR00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (2HR2, L3 int.) (6GK5528-0AR00-2HR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (6GK5528-0AA00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2, L3 int.) (6GK5552-0AR00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (6GK5552-0AA00-2AR2) All versions < V6.6 affected by CVE-2022-31765	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations

MITIGATIONS

Siemens has identified the following specific mitigations that customers can apply to reduce the risk:

Use ACLs to restrict access to the device web server
Restrict access to the device web server ports (default 443/tcp or 80/tcp) to trusted networks and client IP addresses

Product-specific remediations or mitigations can be found in the section Known Affected Products.
Please follow the General Security Recommendations.

GENERAL SECURITY RECOMMENDATIONS

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION

SCALANCE M-800, MUM-800 and S615 as well as the RUGGEDCOM RM1224 are industrial routers.

SCALANCE SC-600 devices are used to protect trusted industrial networks from untrusted networks. They allow filtering incoming and outgoing network connections in different ways.

SCALANCE W products are wireless communication devices used to connect industrial components, like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs), according to the IEEE 802.11 standard (802.11ac, 802.11a/b/g/h, and/or 802.11n).

SCALANCE W-1700 products are wireless communication devices based on IEEE 802.11ac standard. They are used to connect all to sorts of WLAN devices (Access Points or Clients, depending on the operating mode) with a strong focus on industrial components, like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs) and others.

SCALANCE X switches are used to connect industrial components like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs).

VULNERABILITY DESCRIPTION

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Vulnerability CVE-2022-31765

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

CVSS v3.1 Base Score	8.8
CVSS v3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CWE	CWE-862: Missing Authorization

ACKNOWLEDGMENTS

Siemens thanks the following party for its efforts:

Martin Grubhofer and Michael Messner from Siemens Energy for reporting the vulnerability

ADDITIONAL INFORMATION

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

HISTORY DATA

V1.0 (2022-10-11):	Publication Date
V1.1 (2022-11-08):	Added missing affected product SCALANCE S615
V1.2 (2022-12-13):	Added fix for SCALANCE SC-600 family
V1.3 (2023-01-10):	Added fix for SCALANCE W-700 IEEE 802.11ax product family
V1.4 (2023-03-14):	Added missing affected products SCALANCE S615 EEC (6GK5615-0AA01-2AA2) and SCALANCE M876-4 (6GK5876-4AA10-2BA2)
V1.5 (2023-04-11):	Added fix for SCALANCE XM-400/XR-500 family and for SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG family
V1.6 (2026-04-14):	Added fix for SCALANCE W-700 IEEE 802.11n family

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.