Security Bulletin
This security bulletin contains one high risk vulnerability.
EUVDB-ID: #VU68287
Risk: High
CVSSv3.1: 7.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-31766
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when TCP Event service is enabled. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsSCALANCE WAM763-1: 1.1.0
SCALANCE WAM766-1: 1.1.0
SCALANCE WAM766-1 6GHz: 1.1.0
SCALANCE WAM766-1 EEC: 1.1.0
SCALANCE WAM766-1 EEC 6GHz: 1.1.0
SCALANCE WUM763-1: 1.1.0
SCALANCE WUM766-1: 1.1.0
SCALANCE WUM766-1 6GHz: 1.1.0
RUGGEDCOM RM1224 LTE: before 7.1.2
SCALANCE M804PB: before 7.1.2
SCALANCE M812-1 ADSL-Router (Annex A): before 7.1.2
SCALANCE M812-1 ADSL-Router (Annex B): before 7.1.2
SCALANCE M816-1 ADSL-Router (Annex A): before 7.1.2
SCALANCE M816-1 ADSL-Router (Annex B): before 7.1.2
SCALANCE M826-2 SHDSL-Router: before 7.1.2
SCALANCE M874-2: before 7.1.2
SCALANCE M874-3: before 7.1.2
SCALANCE M876-3: before 7.1.2
SCALANCE M876-4: before 7.1.2
SCALANCE MUM853-1: before 7.1.2
SCALANCE MUM856-1: before 7.1.2
SCALANCE S615: before 7.1.2
External linkshttp://cert-portal.siemens.com/productcert/pdf/ssa-697140.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.