2023-04-24 12:24:31 +02:00
|
|
|
{
|
|
|
|
|
"id": "CVE-2022-46144",
|
|
|
|
|
"sourceIdentifier": "productcert@siemens.com",
|
|
|
|
|
"published": "2022-12-13T16:15:25.200",
|
2023-10-10 12:00:30 +00:00
|
|
|
"lastModified": "2023-10-10T11:15:10.987",
|
2023-04-24 12:24:31 +02:00
|
|
|
"vulnStatus": "Modified",
|
|
|
|
|
"descriptions": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
2023-10-10 12:00:30 +00:00
|
|
|
"value": "A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (All versions < V2.3), SCALANCE SC626-2C (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (All versions < V2.3), SCALANCE SC632-2C (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (All versions < V2.3), SCALANCE SC636-2C (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (All versions < V2.3), SCALANCE SC642-2C (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (All versions < V2.3), SCALANCE SC646-2C (All versions >= V2.3 < V3.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive."
|
2023-04-24 12:24:31 +02:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"metrics": {
|
|
|
|
|
"cvssMetricV31": [
|
|
|
|
|
{
|
|
|
|
|
"source": "productcert@siemens.com",
|
|
|
|
|
"type": "Primary",
|
|
|
|
|
"cvssData": {
|
|
|
|
|
"version": "3.1",
|
|
|
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
|
|
|
|
"attackVector": "NETWORK",
|
|
|
|
|
"attackComplexity": "LOW",
|
|
|
|
|
"privilegesRequired": "LOW",
|
|
|
|
|
"userInteraction": "NONE",
|
|
|
|
|
"scope": "UNCHANGED",
|
|
|
|
|
"confidentialityImpact": "NONE",
|
|
|
|
|
"integrityImpact": "NONE",
|
|
|
|
|
"availabilityImpact": "HIGH",
|
|
|
|
|
"baseScore": 6.5,
|
|
|
|
|
"baseSeverity": "MEDIUM"
|
|
|
|
|
},
|
|
|
|
|
"exploitabilityScore": 2.8,
|
|
|
|
|
"impactScore": 3.6
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"source": "nvd@nist.gov",
|
|
|
|
|
"type": "Secondary",
|
|
|
|
|
"cvssData": {
|
|
|
|
|
"version": "3.1",
|
|
|
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
|
|
|
|
"attackVector": "NETWORK",
|
|
|
|
|
"attackComplexity": "LOW",
|
|
|
|
|
"privilegesRequired": "LOW",
|
|
|
|
|
"userInteraction": "NONE",
|
|
|
|
|
"scope": "UNCHANGED",
|
|
|
|
|
"confidentialityImpact": "NONE",
|
|
|
|
|
"integrityImpact": "NONE",
|
|
|
|
|
"availabilityImpact": "HIGH",
|
|
|
|
|
"baseScore": 6.5,
|
|
|
|
|
"baseSeverity": "MEDIUM"
|
|
|
|
|
},
|
|
|
|
|
"exploitabilityScore": 2.8,
|
|
|
|
|
"impactScore": 3.6
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"weaknesses": [
|
|
|
|
|
{
|
|
|
|
|
"source": "productcert@siemens.com",
|
|
|
|
|
"type": "Primary",
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"value": "CWE-664"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"source": "nvd@nist.gov",
|
|
|
|
|
"type": "Secondary",
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"value": "NVD-CWE-Other"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"configurations": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "B5126C71-4E23-470A-BDD9-E455E5BC645C"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5622-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "12FE7784-D59A-4E1E-8551-06CCFED772E4"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "4C5CB015-BBE7-4D22-A2DD-692D107005AA"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5626-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "990EB0C2-0B61-4C6D-92FE-BFAC8E6FF7D1"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "E967C6E7-943B-4249-86F9-BF17C00161DB"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5632-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "C64B24A5-BC52-4812-80BA-3F183641782F"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "BE7993B0-E74F-46FA-83D5-DB29BCA7AD76"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5636-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "0E5F0040-9B10-4E6B-85AE-E4D04CFC42D0"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "7F8CBBC5-960B-4A41-8470-E6E58EFACF0C"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5642-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "900B67C4-DC4D-47FC-9F5A-E53A23398C95"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionStartIncluding": "2.3",
|
|
|
|
|
"versionEndExcluding": "3.0",
|
|
|
|
|
"matchCriteriaId": "B3CEFD91-BD2A-468E-A5E8-4B1EB30D3A45"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5646-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "2743D36E-2DEC-4250-B1B2-F1009A47590E"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5622-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "028A3918-521C-4AF6-AC54-EDBA7805F43B"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5622-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "12FE7784-D59A-4E1E-8551-06CCFED772E4"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5626-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "7BE1CF07-0D43-4AC2-9733-1D3C01E0D504"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5626-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "990EB0C2-0B61-4C6D-92FE-BFAC8E6FF7D1"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5632-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "C0BF8D49-DB9D-4313-969E-7227D31D03B2"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5632-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "C64B24A5-BC52-4812-80BA-3F183641782F"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5636-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "9373F5DA-412B-4801-9CB2-8D49125EA21A"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5636-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "0E5F0040-9B10-4E6B-85AE-E4D04CFC42D0"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5642-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "D867739D-E78A-4F4B-964F-3D355BC575E5"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5642-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "900B67C4-DC4D-47FC-9F5A-E53A23398C95"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "AND",
|
|
|
|
|
"nodes": [
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": true,
|
|
|
|
|
"criteria": "cpe:2.3:o:siemens:6gk5646-2gs00-2ac2_firmware:*:*:*:*:*:*:*:*",
|
|
|
|
|
"versionEndExcluding": "2.3",
|
|
|
|
|
"matchCriteriaId": "6A5F8C7B-305B-4ADA-B9C1-B38F336927CB"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"operator": "OR",
|
|
|
|
|
"negate": false,
|
|
|
|
|
"cpeMatch": [
|
|
|
|
|
{
|
|
|
|
|
"vulnerable": false,
|
|
|
|
|
"criteria": "cpe:2.3:h:siemens:6gk5646-2gs00-2ac2:-:*:*:*:*:*:*:*",
|
|
|
|
|
"matchCriteriaId": "2743D36E-2DEC-4250-B1B2-F1009A47590E"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"references": [
|
|
|
|
|
{
|
|
|
|
|
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf",
|
|
|
|
|
"source": "productcert@siemens.com",
|
|
|
|
|
"tags": [
|
|
|
|
|
"Patch",
|
|
|
|
|
"Vendor Advisory"
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
