critical9.1
CVE-2022-36323
Affected devices do not properly sanitize an input field.
Impact
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance M-800 Firmware | All versions |
| Siemens | Scalance S615 Firmware | All versions |
| Siemens | Scalance Sc-600 Firmware | before 2.3.1 |
| Siemens | Scalance Sc622-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc632-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc636-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc642-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc646-2c Firmware | before 2.3.1 |
| Siemens | Scalance W700 Ieee 802.11ax Firmware | All versions |
| Siemens | Scalance W700 Ieee 802.11n Firmware | All versions |
| Siemens | Scalance W700 Ieee 802.11ac Firmware | All versions |
| Siemens | Scalance Xb-200 Firmware | All versions |