Code Injection in Siemens products - CVE-2022-34821
Published: July 13, 2022 / Updated: July 14, 2022
Vulnerability identifier: #VU65274
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-34821
CWE-ID: CWE-94
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation within the specific configuration options for OpenVPN. A remote administrator on the local network can send a specially crafted request and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL
SIPLUS S7-1200 CP 1243-1 RAIL
SIPLUS S7-1200 CP 1243-1
SIPLUS NET CP 1242-7 V2
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL
SIPLUS ET 200SP CP 1543SP-1 ISEC
SIMATIC CP 1242-7 V2
SIMATIC CP 1543SP-1
SIMATIC CP 1542SP-1 IRC
SIMATIC CP 1243-8 IRC
SIMATIC CP 1243-7 LTE US
SIMATIC CP 1243-7 LTE EU
SIMATIC CP 1243-1
SIMATIC CP 1543-1
SIPLUS NET CP 1543-1
SCALANCE S615
SCALANCE M876-3 (EVDO)
SCALANCE S615 EEC
SCALANCE MUM856-1 (RoW)
SCALANCE MUM856-1 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M876-4 (EU)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
RUGGEDCOM RM1224 LTE(4G) EU
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M804PB
RUGGEDCOM RM1224 LTE(4G) NAM
SCALANCE SC622-2C
SCALANCE SC626-2C
SCALANCE SC632-2C
SCALANCE SC636-2C
SCALANCE SC642-2C
SCALANCE SC646-2C
SIPLUS S7-1200 CP 1243-1 RAIL
SIPLUS S7-1200 CP 1243-1
SIPLUS NET CP 1242-7 V2
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL
SIPLUS ET 200SP CP 1543SP-1 ISEC
SIMATIC CP 1242-7 V2
SIMATIC CP 1543SP-1
SIMATIC CP 1542SP-1 IRC
SIMATIC CP 1243-8 IRC
SIMATIC CP 1243-7 LTE US
SIMATIC CP 1243-7 LTE EU
SIMATIC CP 1243-1
SIMATIC CP 1543-1
SIPLUS NET CP 1543-1
SCALANCE S615
SCALANCE M876-3 (EVDO)
SCALANCE S615 EEC
SCALANCE MUM856-1 (RoW)
SCALANCE MUM856-1 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M876-4 (EU)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
RUGGEDCOM RM1224 LTE(4G) EU
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M804PB
RUGGEDCOM RM1224 LTE(4G) NAM
SCALANCE SC622-2C
SCALANCE SC626-2C
SCALANCE SC632-2C
SCALANCE SC636-2C
SCALANCE SC642-2C
SCALANCE SC646-2C
How to mitigate CVE-2022-34821
Install update from vendor's website.
SIMATIC CP 1543-1 - update to 3.0.22
SIPLUS NET CP 1543-1 - update to 3.0.22
SCALANCE SC622-2C - update to 3.0
SCALANCE SC626-2C - update to 3.0
SCALANCE SC632-2C - update to 3.0
SCALANCE SC636-2C - update to 3.0
SCALANCE SC642-2C - update to 3.0
SCALANCE SC646-2C - update to 3.0
SIPLUS NET CP 1543-1 - update to 3.0.22
SCALANCE SC622-2C - update to 3.0
SCALANCE SC626-2C - update to 3.0
SCALANCE SC632-2C - update to 3.0
SCALANCE SC636-2C - update to 3.0
SCALANCE SC642-2C - update to 3.0
SCALANCE SC646-2C - update to 3.0