Skip to main content
← All vulnerabilities
CVE-2022-46144

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2)

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V2.3, V3.0, V2.0.0
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Siemens SCALANCE SC622-2C

    fixed in V2.3

  • Siemens SCALANCE SC622-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE SC626-2C

    fixed in V2.3

  • Siemens SCALANCE SC626-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE SC632-2C

    fixed in V2.3

  • Siemens SCALANCE SC632-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE SC636-2C

    fixed in V2.3

  • Siemens SCALANCE SC636-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE SC642-2C

    fixed in V2.3

  • Siemens SCALANCE SC642-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE SC646-2C

    fixed in V2.3

  • Siemens SCALANCE SC646-2C

    From V2.3 · fixed in V3.0

  • Siemens SCALANCE WAM763-1

    fixed in V2.0.0

  • Siemens SCALANCE WAM766-1

    fixed in V2.0.0

  • Siemens SCALANCE WAM766-1 (US)

    fixed in V2.0.0

  • Siemens SCALANCE WAM766-1 EEC

    fixed in V2.0.0

  • Siemens SCALANCE WAM766-1 EEC (US)

    fixed in V2.0.0

  • Siemens SCALANCE WUM763-1

    fixed in V2.0.0

  • Siemens SCALANCE WUM763-1

    fixed in V2.0.0

  • Siemens SCALANCE WUM766-1

    fixed in V2.0.0

  • Siemens SCALANCE WUM766-1 (USA)

    fixed in V2.0.0

References 3

cert-portal.siemens.com