Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-25753 Details

Description

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. The handling of arguments such as IP addresses in the CLI of affected devices is prone to buffer overflows. This could allow an authenticated remote attacker to execute arbitrary code on the device.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf	CVE	MitigationPatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-836527.pdf	[email protected]	MitigationPatchVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]
CWE-121	Stack-based Buffer Overflow	[email protected]

Affected Products

Product	Versions
siemens scalance x302-7eec firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x302-7eec_firmware:::::::: Remediation No remediation found in references.
siemens scalance x302-7eec	All versions
CPE cpe:2.3:h:siemens:scalance_x302-7eec:-:::::::* Remediation No remediation found in references.
siemens scalance x304-2fe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x304-2fe_firmware:::::::: Remediation No remediation found in references.
siemens scalance x304-2fe	All versions
CPE cpe:2.3:h:siemens:scalance_x304-2fe:-:::::::* Remediation No remediation found in references.
siemens scalance x306-1ldfe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x306-1ldfe_firmware:::::::: Remediation No remediation found in references.
siemens scalance x306-1ldfe	All versions
CPE cpe:2.3:h:siemens:scalance_x306-1ldfe:-:::::::* Remediation No remediation found in references.
siemens scalance x307-2eec firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x307-2eec_firmware:::::::: Remediation No remediation found in references.
siemens scalance x307-2eec	All versions
CPE cpe:2.3:h:siemens:scalance_x307-2eec:-:::::::* Remediation No remediation found in references.
siemens scalance x307-3 firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x307-3_firmware:::::::: Remediation No remediation found in references.
siemens scalance x307-3	All versions
CPE cpe:2.3:h:siemens:scalance_x307-3:-:::::::* Remediation No remediation found in references.
siemens scalance x307-3ld firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x307-3ld_firmware:::::::: Remediation No remediation found in references.
siemens scalance x307-3ld	All versions
CPE cpe:2.3:h:siemens:scalance_x307-3ld:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2 firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2ld firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2ld_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2ld	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2ld:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2lh firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2lh_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2lh	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2lh:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2lh+ firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2lh+_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2lh+	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2lh+:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2m firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2m_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2m	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2m:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2m poe firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x308-2m_poe_firmware:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2m poe	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2m_poe:-:::::::* Remediation No remediation found in references.
siemens scalance x308-2m ts firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x308-2m_ts_firmware:::::::: Remediation No remediation found in references.
siemens scalance x308-2m ts	All versions
CPE cpe:2.3:h:siemens:scalance_x308-2m_ts:-:::::::* Remediation No remediation found in references.
siemens scalance x310 firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x310_firmware:::::::: Remediation No remediation found in references.
siemens scalance x310	All versions
CPE cpe:2.3:h:siemens:scalance_x310:-:::::::* Remediation No remediation found in references.
siemens scalance x310fe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x310fe_firmware:::::::: Remediation No remediation found in references.
siemens scalance x310fe	All versions
CPE cpe:2.3:h:siemens:scalance_x310fe:-:::::::* Remediation No remediation found in references.
siemens scalance x320-1fe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x320-1fe_firmware:::::::: Remediation No remediation found in references.
siemens scalance x320-1fe	All versions
CPE cpe:2.3:h:siemens:scalance_x320-1fe:-:::::::* Remediation No remediation found in references.
siemens scalance x320-1-2ldfe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x320-1-2ldfe_firmware:::::::: Remediation No remediation found in references.
siemens scalance x320-1-2ldfe	All versions
CPE cpe:2.3:h:siemens:scalance_x320-1-2ldfe:-:::::::* Remediation No remediation found in references.
siemens scalance x408-2 firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_x408-2_firmware:::::::: Remediation No remediation found in references.
siemens scalance x408-2	All versions
CPE cpe:2.3:h:siemens:scalance_x408-2:-:::::::* Remediation No remediation found in references.
siemens scalance xr324-4m eec firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_xr324-4m_eec_firmware:::::::: Remediation No remediation found in references.
siemens scalance xr324-4m eec	All versions
CPE cpe:2.3:h:siemens:scalance_xr324-4m_eec:-:::::::* Remediation No remediation found in references.
siemens scalance xr324-4m poe firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_xr324-4m_poe_firmware:::::::: Remediation No remediation found in references.
siemens scalance xr324-4m poe	All versions
CPE cpe:2.3:h:siemens:scalance_xr324-4m_poe:-:::::::* Remediation No remediation found in references.
siemens scalance xr324-4m poe ts firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_xr324-4m_poe_ts_firmware:::::::: Remediation No remediation found in references.
siemens scalance xr324-4m poe ts	All versions
CPE cpe:2.3:h:siemens:scalance_xr324-4m_poe_ts:-:::::::* Remediation No remediation found in references.
siemens scalance xr324-12m firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_xr324-12m_firmware:::::::: Remediation No remediation found in references.
siemens scalance xr324-12m	All versions
CPE cpe:2.3:h:siemens:scalance_xr324-12m:-:::::::* Remediation No remediation found in references.
siemens scalance xr324-12m ts firmware	< 4.1.4
CPE cpe:2.3:o:siemens:scalance_xr324-12m_ts_firmware:::::::: Remediation No remediation found in references.
siemens scalance xr324-12m ts	All versions
CPE cpe:2.3:h:siemens:scalance_xr324-12m_ts:-:::::::* Remediation No remediation found in references.
siemens siplus net scalance x308-2 firmware	< 4.1.4
CPE cpe:2.3:o:siemens:siplus_net_scalance_x308-2_firmware:::::::: Remediation No remediation found in references.
siemens siplus net scalance x308-2	All versions
CPE cpe:2.3:h:siemens:siplus_net_scalance_x308-2:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 19, 2022	Initial Analysis	[email protected]

CVE-2022-25753 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation