Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-26649 Details

Description

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204-2 (All versions < V5.2.6), SCALANCE X204-2FM (All versions < V5.2.6), SCALANCE X204-2LD (All versions < V5.2.6), SCALANCE X204-2LD TS (All versions < V5.2.6), SCALANCE X204-2TS (All versions < V5.2.6), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE X206-1 (All versions < V5.2.6), SCALANCE X206-1LD (All versions < V5.2.6), SCALANCE X208 (All versions < V5.2.6), SCALANCE X208PRO (All versions < V5.2.6), SCALANCE X212-2 (All versions < V5.2.6), SCALANCE X212-2LD (All versions < V5.2.6), SCALANCE X216 (All versions < V5.2.6), SCALANCE X224 (All versions < V5.2.6), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204 (All versions < V5.2.6), SCALANCE XF204-2 (All versions < V5.2.6), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SCALANCE XF206-1 (All versions < V5.2.6), SCALANCE XF208 (All versions < V5.2.6). Affected devices do not properly validate the URI of incoming HTTP GET requests. This could allow an unauthenticated remote attacker to crash affected devices.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:9.6 CRITICALVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf	CVE	PatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf	[email protected]	PatchVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]

Affected Products

Product	Versions
siemens scalance x204-2 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x204-2_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204-2	All versions
CPE cpe:2.3:h:siemens:scalance_x204-2:-:::::::* Remediation No remediation found in references.
siemens scalance x204-2fm firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x204-2fm_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204-2fm	All versions
CPE cpe:2.3:h:siemens:scalance_x204-2fm:-:::::::* Remediation No remediation found in references.
siemens scalance x204-2ld firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x204-2ld_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204-2ld	All versions
CPE cpe:2.3:h:siemens:scalance_x204-2ld:-:::::::* Remediation No remediation found in references.
siemens scalance x204-2ld ts firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204-2ld ts	All versions
CPE cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:::::::* Remediation No remediation found in references.
siemens scalance x204-2ts firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x204-2ts_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204-2ts	All versions
CPE cpe:2.3:h:siemens:scalance_x204-2ts:-:::::::* Remediation No remediation found in references.
siemens scalance x206-1 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x206-1_firmware:::::::: Remediation No remediation found in references.
siemens scalance x206-1	All versions
CPE cpe:2.3:h:siemens:scalance_x206-1:-:::::::* Remediation No remediation found in references.
siemens scalance x206-1ld firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x206-1ld_firmware:::::::: Remediation No remediation found in references.
siemens scalance x206-1ld	All versions
CPE cpe:2.3:h:siemens:scalance_x206-1ld:-:::::::* Remediation No remediation found in references.
siemens scalance x208 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x208_firmware:::::::: Remediation No remediation found in references.
siemens scalance x208	All versions
CPE cpe:2.3:h:siemens:scalance_x208:-:::::::* Remediation No remediation found in references.
siemens scalance x208 pro firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x208_pro_firmware:::::::: Remediation No remediation found in references.
siemens scalance x208 pro	All versions
CPE cpe:2.3:h:siemens:scalance_x208_pro:-:::::::* Remediation No remediation found in references.
siemens scalance x212-2 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x212-2_firmware:::::::: Remediation No remediation found in references.
siemens scalance x212-2	All versions
CPE cpe:2.3:h:siemens:scalance_x212-2:-:::::::* Remediation No remediation found in references.
siemens scalance x212-2ld firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x212-2ld_firmware:::::::: Remediation No remediation found in references.
siemens scalance x212-2ld	All versions
CPE cpe:2.3:h:siemens:scalance_x212-2ld:-:::::::* Remediation No remediation found in references.
siemens scalance x216 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x216_firmware:::::::: Remediation No remediation found in references.
siemens scalance x216	All versions
CPE cpe:2.3:h:siemens:scalance_x216:-:::::::* Remediation No remediation found in references.
siemens scalance x224 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_x224_firmware:::::::: Remediation No remediation found in references.
siemens scalance x224	All versions
CPE cpe:2.3:h:siemens:scalance_x224:-:::::::* Remediation No remediation found in references.
siemens scalance xf204 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_xf204_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf204	All versions
CPE cpe:2.3:h:siemens:scalance_xf204:-:::::::* Remediation No remediation found in references.
siemens scalance xf204-2 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_xf204-2_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf204-2	All versions
CPE cpe:2.3:h:siemens:scalance_xf204-2:-:::::::* Remediation No remediation found in references.
siemens scalance xf206-1 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_xf206-1_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf206-1	All versions
CPE cpe:2.3:h:siemens:scalance_xf206-1:-:::::::* Remediation No remediation found in references.
siemens scalance xf208 firmware	< 5.2.6
CPE cpe:2.3:o:siemens:scalance_xf208_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf208	All versions
CPE cpe:2.3:h:siemens:scalance_xf208:-:::::::* Remediation No remediation found in references.
siemens scalance x200-4p irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance x200-4p irt	All versions
CPE cpe:2.3:h:siemens:scalance_x200-4p_irt:-:::::::* Remediation No remediation found in references.
siemens scalance x201-3p irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance x201-3p irt	All versions
CPE cpe:2.3:h:siemens:scalance_x201-3p_irt:-:::::::* Remediation No remediation found in references.
siemens scalance x201-3p irt pro firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:::::::: Remediation No remediation found in references.
siemens scalance x201-3p irt pro	All versions
CPE cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:::::::* Remediation No remediation found in references.
siemens scalance x202-2irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x202-2irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance x202-2irt	All versions
CPE cpe:2.3:h:siemens:scalance_x202-2irt:-:::::::* Remediation No remediation found in references.
siemens scalance x202-2p irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance x202-2p irt	All versions
CPE cpe:2.3:h:siemens:scalance_x202-2p_irt:-:::::::* Remediation No remediation found in references.
siemens scalance x202-2p irt pro firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:::::::: Remediation No remediation found in references.
siemens scalance x202-2p irt pro	All versions
CPE cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:::::::* Remediation No remediation found in references.
siemens scalance x204irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x204irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204irt	All versions
CPE cpe:2.3:h:siemens:scalance_x204irt:-:::::::* Remediation No remediation found in references.
siemens scalance x204irt pro firmware	All versions
CPE cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:::::::: Remediation No remediation found in references.
siemens scalance x204irt pro	All versions
CPE cpe:2.3:h:siemens:scalance_x204irt_pro:-:::::::* Remediation No remediation found in references.
siemens scalance xf201-3p irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf201-3p irt	All versions
CPE cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:::::::* Remediation No remediation found in references.
siemens scalance xf202-2p irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf202-2p irt	All versions
CPE cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:::::::* Remediation No remediation found in references.
siemens scalance xf204-2ba irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf204-2ba irt	All versions
CPE cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:::::::* Remediation No remediation found in references.
siemens scalance xf204irt firmware	All versions
CPE cpe:2.3:o:siemens:scalance_xf204irt_firmware:::::::: Remediation No remediation found in references.
siemens scalance xf204irt	All versions
CPE cpe:2.3:h:siemens:scalance_xf204irt:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 11, 2023	CVE Modified	[email protected]
Jul 15, 2022	Initial Analysis	[email protected]

CVE-2022-26649 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation