Buffer overflow in Siemens products - CVE-2022-26649

Vulnerability identifier: #VU65296

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-26649

CWE-ID: CWE-119

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the the URI of incoming HTTP GET requests. A remote attacker on the local network can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

SCALANCE X200-4P IRT
SCALANCE X201-3P IRT
SCALANCE X201-3P IRT PRO
SCALANCE X202-2IRT
SCALANCE X202-2P IRT
SCALANCE X202-2P IRT PRO
SCALANCE X204IRT
SCALANCE X204IRT PRO
SCALANCE XF201-3P IRT
SCALANCE XF202-2P IRT
SCALANCE XF204-2BA IRT
SCALANCE XF204IRT
SCALANCE X208PRO
SCALANCE XF208
SCALANCE XF206-1
SCALANCE XF204-2
SCALANCE XF204
SCALANCE X224
SCALANCE X216
SCALANCE X212-2LD
SCALANCE X212-2
SCALANCE X204-2
SCALANCE X208
SCALANCE X206-1LD
SCALANCE X206-1
SCALANCE X204-2TS
SCALANCE X204-2LD TS
SCALANCE X204-2LD
SCALANCE X204-2FM

Install updates from vendor's website.

SCALANCE X208PRO - update to 5.2.6
SCALANCE XF208 - update to 5.2.6
SCALANCE XF206-1 - update to 5.2.6
SCALANCE XF204-2 - update to 5.2.6
SCALANCE XF204 - update to 5.2.6
SCALANCE X224 - update to 5.2.6
SCALANCE X216 - update to 5.2.6
SCALANCE X212-2LD - update to 5.2.6
SCALANCE X212-2 - update to 5.2.6
SCALANCE X204-2 - update to 5.2.6
SCALANCE X208 - update to 5.2.6
SCALANCE X206-1LD - update to 5.2.6
SCALANCE X206-1 - update to 5.2.6
SCALANCE X204-2TS - update to 5.2.6
SCALANCE X204-2LD TS - update to 5.2.6
SCALANCE X204-2LD - update to 5.2.6
SCALANCE X204-2FM - update to 5.2.6

• https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdficsa-22-195-01

• Multiple vulnerabilities in Siemens SCALANCE X Switch Devices