SSA-710008

Siemens Security Advisory by Siemens ProductCERT

SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products

Publication Date:	2022-08-09
Last Update:	2026-04-14
Current Version:	V1.5
CVSS v3.1 Base Score:	9.1

SUMMARY

SCALANCE devices contain multiple vulnerabilities in MSPS based product lines that could allow authenticated remote attackers to execute custom code or create a XSS situation, as well as unauthenticated remote attackers to create a denial of service condition.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

KNOWN AFFECTED PRODUCTS

Un-/Collapse All

Affected Product and Versions	Remediation
SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)	Show more details
RUGGEDCOM RM1224 family (6GK6108-4AM00)	Show more details
RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M-800 family	Show more details
SCALANCE M804PB (6GK5804-0AP00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M812-1 ADSL-Router family	Show more details
SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M816-1 ADSL-Router family	Show more details
SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M874-2 (6GK5874-2AA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M874-3 (6GK5874-3AA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-3 (6GK5876-3AA02-2BA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM-800 family	Show more details
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) All versions < V7.1.2 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V7.1.2 or later version https://support.industry.siemens.com/cs/ww/en/view/109813051/ See further recommendations from section Mitigations
SCALANCE SC-600 family	Show more details
SCALANCE SC622-2C (6GK5622-2GS00-2AC2) All versions < V2.3.1 affected by all CVEs CVE-2022-36323 CVE-2022-36325 CVE-2022-36324	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC626-2C (6GK5626-2GS00-2AC2) All versions < V2.3.1 affected by all CVEs CVE-2022-36324 CVE-2022-36323 CVE-2022-36325	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC632-2C (6GK5632-2GS00-2AC2)	Show more details
SCALANCE SC632-2C (6GK5632-2GS00-2AC2) All versions < V2.3.1 affected by multiple CVEs CVE-2022-36323 CVE-2022-36325	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC632-2C (6GK5632-2GS00-2AC2) All versions < V2.3.1 affected by CVE-2022-36324	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC636-2C (6GK5636-2GS00-2AC2)	Show more details
SCALANCE SC636-2C (6GK5636-2GS00-2AC2) All versions < V2.3.1 affected by multiple CVEs CVE-2022-36323 CVE-2022-36325	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC636-2C (6GK5636-2GS00-2AC2) All versions < V2.3.1 affected by CVE-2022-36324	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC642-2C (6GK5642-2GS00-2AC2)	Show more details
SCALANCE SC642-2C (6GK5642-2GS00-2AC2) All versions < V2.3.1 affected by multiple CVEs CVE-2022-36323 CVE-2022-36325	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC642-2C (6GK5642-2GS00-2AC2) All versions < V2.3.1 affected by CVE-2022-36324	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC646-2C (6GK5646-2GS00-2AC2)	Show more details
SCALANCE SC646-2C (6GK5646-2GS00-2AC2) All versions < V2.3.1 affected by multiple CVEs CVE-2022-36323 CVE-2022-36325	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE SC646-2C (6GK5646-2GS00-2AC2) All versions < V2.3.1 affected by CVE-2022-36324	Update to V2.3.1 or later version https://support.industry.siemens.com/cs/ww/en/view/109810992/ See further recommendations from section Mitigations
SCALANCE W-700 IEEE 802.11ax family	Show more details
SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) All versions < V2.0.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V2.0.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109815650/ See further recommendations from section Mitigations
SCALANCE W-700 IEEE 802.11n family	Show more details
SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0) All versions < V6.6.0 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109996102/ See further recommendations from section Mitigations
SCALANCE W-1700 IEEE 802.11ac family	Show more details
SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) All versions affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Currently no fix is planned See further recommendations from section Mitigations
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG family	Show more details
SCALANCE XB-200 family	Show more details
SCALANCE XB205-3 (SC, PN) (6GK5205-3BB00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BB00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, E/IP) (6GK5205-3BD00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3 (ST, PN) (6GK5205-3BD00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3LD (SC, E/IP) (6GK5205-3BF00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB205-3LD (SC, PN) (6GK5205-3BF00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB208 (E/IP) (6GK5208-0BA00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB208 (PN) (6GK5208-0BA00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (SC, E/IP) (6GK5213-3BD00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (SC, PN) (6GK5213-3BD00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (ST, E/IP) (6GK5213-3BB00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3 (ST, PN) (6GK5213-3BB00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3LD (SC, E/IP) (6GK5213-3BF00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB213-3LD (SC, PN) (6GK5213-3BF00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB216 (E/IP) (6GK5216-0BA00-2TB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XB216 (PN) (6GK5216-0BA00-2AB2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC-200 family	Show more details
SCALANCE XC206-2 (SC) (6GK5206-2BD00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2 (ST/BFOC) (6GK5206-2BB00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE (6GK5206-2RS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE (54 V DC) (6GK5206-2RS00-5AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2G PoE EEC (54 V DC) (6GK5206-2RS00-5FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP (6GK5206-2BS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP EEC (6GK5206-2BS00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G (6GK5206-2GS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G (EIP DEF.) (6GK5206-2GS00-2TC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC206-2SFP G EEC (6GK5206-2GS00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208 (6GK5208-0BA00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208EEC (6GK5208-0BA00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G (6GK5208-0GA00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G (EIP def.) (6GK5208-0GA00-2TC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G EEC (6GK5208-0GA00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G PoE (6GK5208-0RA00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC208G PoE (54 V DC) (6GK5208-0RA00-5AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216 (6GK5216-0BA00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-3G PoE (6GK5216-3RS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-3G PoE (54 V DC) (6GK5216-3RS00-5AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C (6GK5216-4BS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G (6GK5216-4GS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G (EIP Def.) (6GK5216-4GS00-2TC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216-4C G EEC (6GK5216-4GS00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC216EEC (6GK5216-0BA00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224 (6GK5224-0BA00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G (6GK5224-4GS00-2AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G (EIP Def.) (6GK5224-4GS00-2TC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XC224-4C G EEC (6GK5224-4GS00-2FC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC206-2 (6AG1206-2BB00-7AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC206-2SFP (6AG1206-2BS00-7AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC208 (6AG1208-0BA00-7AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SIPLUS NET SCALANCE XC216-4C (6AG1216-4BS00-7AC2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF-200BA family	Show more details
SCALANCE XF204 (6GK5204-0BA00-2GF2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204 DNA (6GK5204-0BA00-2YF2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204-2BA (6GK5204-2AA00-2GF2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XF204-2BA DNA (6GK5204-2AA00-2YF2) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP-200 family	Show more details
SCALANCE XP208 (6GK5208-0HA00-2AS6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208 (Ethernet/IP) (6GK5208-0HA00-2TS6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208EEC (6GK5208-0HA00-2ES6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP208PoE EEC (6GK5208-0UA00-5ES6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216 (6GK5216-0HA00-2AS6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216 (Ethernet/IP) (6GK5216-0HA00-2TS6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216EEC (6GK5216-0HA00-2ES6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XP216POE EEC (6GK5216-0UA00-5ES6) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR-300WG family	Show more details
SCALANCE XR324WG (24 x FE, AC 230V) (6GK5324-0BA00-3AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR324WG (24 X FE, DC 24V) (6GK5324-0BA00-2AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR326-2C PoE WG (6GK5326-2QS00-3AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR326-2C PoE WG (without UL) (6GK5326-2QS00-3RR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (6GK5328-4FS00-3AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (6GK5328-4FS00-3RR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) (6GK5328-4FS00-2AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (6GK5328-4FS00-2RR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (28xGE, AC 230V) (6GK5328-4SS00-3AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XR328-4C WG (28xGE, DC 24V) (6GK5328-4SS00-2AR3) All versions < V4.4 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V4.4 or later version https://support.industry.siemens.com/cs/ww/en/view/109817768/ See further recommendations from section Mitigations
SCALANCE XM-400/XR-500 family	Show more details
SCALANCE XM-400 family	Show more details
SCALANCE XM408-4C (6GK5408-4GP00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-4C (L3 int.) (6GK5408-4GQ00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-8C (6GK5408-8GS00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM408-8C (L3 int.) (6GK5408-8GR00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM416-4C (6GK5416-4GS00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XM416-4C (L3 int.) (6GK5416-4GR00-2AM2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR-500 family	Show more details
SCALANCE XR524-8C, 1x230V (6GK5524-8GS00-3AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 1x230V (L3 int.) (6GK5524-8GR00-3AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 2x230V (6GK5524-8GS00-4AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 2x230V (L3 int.) (6GK5524-8GR00-4AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 24V (6GK5524-8GS00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR524-8C, 24V (L3 int.) (6GK5524-8GR00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 1x230V (6GK5526-8GS00-3AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 1x230V (L3 int.) (6GK5526-8GR00-3AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 2x230V (6GK5526-8GS00-4AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 2x230V (L3 int.) (6GK5526-8GR00-4AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 24V (6GK5526-8GS00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR526-8C, 24V (L3 int.) (6GK5526-8GR00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (2HR2) (6GK5528-0AA00-2HR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (2HR2, L3 int.) (6GK5528-0AR00-2HR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (6GK5528-0AA00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR528-6M (L3 int.) (6GK5528-0AR00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2) (6GK5552-0AA00-2HR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2) (6GK5552-0AR00-2HR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (2HR2, L3 int.) (6GK5552-0AR00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations
SCALANCE XR552-12M (6GK5552-0AA00-2AR2) All versions < V6.6 affected by all CVEs CVE-2022-36323 CVE-2022-36324 CVE-2022-36325	Update to V6.6 or later version https://support.industry.siemens.com/cs/ww/en/view/109818003/ See further recommendations from section Mitigations

MITIGATIONS

Siemens has identified the following specific mitigations that customers can apply to reduce the risk:

Apply the principle of least privileges for accounts configured on the affected devices
Restrict network access in affected system(s) to ports 80/TCP and 443/TCP to trusted IP addresses and personal only

Product-specific remediations or mitigations can be found in the section Known Affected Products.
Please follow the General Security Recommendations.

GENERAL SECURITY RECOMMENDATIONS

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION

SCALANCE M-800, MUM-800 and S615 as well as the RUGGEDCOM RM1224 are industrial routers.

SCALANCE SC-600 devices are used to protect trusted industrial networks from untrusted networks. They allow filtering incoming and outgoing network connections in different ways.

SCALANCE W products are wireless communication devices used to connect industrial components, like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs), according to the IEEE 802.11 standard (802.11ac, 802.11a/b/g/h, and/or 802.11n).

SCALANCE W-1700 products are wireless communication devices based on IEEE 802.11ac standard. They are used to connect all to sorts of WLAN devices (Access Points or Clients, depending on the operating mode) with a strong focus on industrial components, like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs) and others.

SCALANCE X switches are used to connect industrial components like Programmable Logic Controllers (PLCs) or Human Machine Interfaces (HMIs).

VULNERABILITY DESCRIPTION

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Vulnerability CVE-2022-36323

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

CVSS v3.1 Base Score	9.1
CVSS v3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
CWE	CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Vulnerability CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

CVSS v3.1 Base Score	7.5
CVSS v3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE	CWE-770: Allocation of Resources Without Limits or Throttling

Vulnerability CVE-2022-36325

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

CVSS v3.1 Base Score	6.8
CVSS v3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CWE	CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

ADDITIONAL INFORMATION

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

HISTORY DATA

V1.0 (2022-08-09):	Publication Date
V1.1 (2022-09-13):	Added fix for SCALANCE M-800, SCALANCE MUM-800 and RUGGEDCOM RM1224 families, as well as for SCALANCE S615 families; All affected product families were expanded
V1.2 (2023-01-10):	Added fix for SCALANCE W-700 IEEE 802.11ax product family
V1.3 (2023-04-11):	Added fix for SCALANCE XM-400/XR-500 family and for SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG family
V1.4 (2023-10-10):	Added that SCALANCE SC-600 family was also affected by CVE-2022-36324
V1.5 (2026-04-14):	Added fix for SCALANCE W-700 IEEE 802.11n family

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.