NetSight
high7.5

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters.

Impact

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected products

VendorProductAffected versions
SiemensScalance M-800 Firmware
All versions
SiemensScalance S615 Firmware
All versions
SiemensScalance W700 Ieee 802.11ax Firmware
All versions
SiemensScalance W700 Ieee 802.11n Firmware
All versions
SiemensScalance W700 Ieee 802.11ac Firmware
All versions
SiemensScalance Xb-200 Firmware
All versions
SiemensScalance Xb205-3 Firmware
All versions
SiemensScalance Xb205-3ld Firmware
All versions
SiemensScalance Xb208 Firmware
All versions
SiemensScalance Xb213-3 Firmware
All versions
SiemensScalance Xb213-3ld Firmware
All versions
SiemensScalance Xb216 Firmware
All versions

Weakness classification

References