Use of insufficiently random values in Siemens products - CVE-2022-46353

Vulnerability identifier: #VU70392

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-46353

CWE-ID: CWE-330

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the webserver of affected devices calculates session ids and nonces in an insecure manner. A remote attacker can brute-force session ids and hijack existing sessions.

SCALANCE X204RNA (HSR)
SCALANCE X204RNA (PRP)
SCALANCE X204RNA EEC (HSR)
SCALANCE X204RNA EEC (PRP)
SCALANCE X204RNA EEC (PRP/HSR)

Install updates from vendor's website.

SCALANCE X204RNA (HSR) - update to 3.2.7
SCALANCE X204RNA (PRP) - update to 3.2.7
SCALANCE X204RNA EEC (HSR) - update to 3.2.7
SCALANCE X204RNA EEC (PRP) - update to 3.2.7
SCALANCE X204RNA EEC (PRP/HSR) - update to 3.2.7

• https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf

• Multiple vulnerabilities in Siemens SCALANCE X-200RNA Switch Devices