medium6.8
CVE-2022-36325
Affected devices do not properly sanitize data introduced by an user when rendering the web interface.
Impact
Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance M-800 Firmware | All versions |
| Siemens | Scalance S615 Firmware | All versions |
| Siemens | Scalance Sc-600 Firmware | before 2.3.1 |
| Siemens | Scalance Sc622-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc632-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc636-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc642-2c Firmware | before 2.3.1 |
| Siemens | Scalance Sc646-2c Firmware | before 2.3.1 |
| Siemens | Scalance W700 Ieee 802.11ax Firmware | All versions |
| Siemens | Scalance W700 Ieee 802.11n Firmware | All versions |
| Siemens | Scalance W700 Ieee 802.11ac Firmware | All versions |
| Siemens | Scalance Xb-200 Firmware | All versions |