Unchecked Return Value in Siemens products - CVE-2023-44322

Vulnerability identifier: #VU83424

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-44322

CWE-ID: CWE-252

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the affected devices can be configured to send emails when certain events occur on the device. A remote attacker can perform a denial of service (DoS) attack.

SCALANCE XP208PoE EEC
SCALANCE XC216EEC
SCALANCE XC224
SCALANCE XC224-4C G
SCALANCE XC224-4C G EEC
SCALANCE XF204
SCALANCE XF204 DNA
SCALANCE XF204-2BA
SCALANCE XF204-2BA DNA
SCALANCE XP208
SCALANCE XP208EEC
SCALANCE XC216-4C G EEC
SCALANCE XP216
SCALANCE XP216EEC
SCALANCE XP216POE EEC
SCALANCE XR324WG
SCALANCE XR326-2C PoE WG
SCALANCE XR328-4C WG
SIPLUS NET SCALANCE XC206-2
SIPLUS NET SCALANCE XC206-2SFP
SIPLUS NET SCALANCE XC208
SIPLUS NET SCALANCE XC216-4C
SCALANCE XC206-2SFP G
SCALANCE XB205-3LD
SCALANCE XB208
SCALANCE XB213-3
SCALANCE XB213-3LD
SCALANCE XB216
SCALANCE XC206-2
SCALANCE XC206-2G PoE
SCALANCE XC206-2G PoE EEC
SCALANCE XC206-2SFP
SCALANCE XC206-2SFP EEC
SCALANCE XB205-3
SCALANCE XC206-2SFP G EEC
SCALANCE XC208
SCALANCE XC208EEC
SCALANCE XC208G
SCALANCE XC208G EEC
SCALANCE XC208G PoE
SCALANCE XC216
SCALANCE XC216-3G PoE
SCALANCE XC216-4C
SCALANCE XC216-4C G
SCALANCE S615 EEC
SCALANCE MUM856-1 (RoW)
SCALANCE MUM856-1 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M876-4 (EU)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
SCALANCE M876-3 (EVDO)
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M804PB
RUGGEDCOM RM1224 LTE(4G) NAM
RUGGEDCOM RM1224 LTE(4G) EU
SCALANCE S615

Install updates from vendor's website.

SCALANCE XP208PoE EEC - update to 4.5
SCALANCE XC216EEC - update to 4.5
SCALANCE XC224 - update to 4.5
SCALANCE XC224-4C G - update to 4.5
SCALANCE XC224-4C G EEC - update to 4.5
SCALANCE XF204 - update to 4.5
SCALANCE XF204 DNA - update to 4.5
SCALANCE XF204-2BA - update to 4.5
SCALANCE XF204-2BA DNA - update to 4.5
SCALANCE XP208 - update to 4.5
SCALANCE XP208EEC - update to 4.5
SCALANCE XC216-4C G EEC - update to 4.5
SCALANCE XP216 - update to 4.5
SCALANCE XP216EEC - update to 4.5
SCALANCE XP216POE EEC - update to 4.5
SCALANCE XR324WG - update to 4.5
SCALANCE XR326-2C PoE WG - update to 4.5
SCALANCE XR328-4C WG - update to 4.5
SIPLUS NET SCALANCE XC206-2 - update to 4.5
SIPLUS NET SCALANCE XC206-2SFP - update to 4.5
SIPLUS NET SCALANCE XC208 - update to 4.5
SIPLUS NET SCALANCE XC216-4C - update to 4.5
SCALANCE XC206-2SFP G - update to 4.5
SCALANCE XB205-3LD - update to 4.5
SCALANCE XB208 - update to 4.5
SCALANCE XB213-3 - update to 4.5
SCALANCE XB213-3LD - update to 4.5
SCALANCE XB216 - update to 4.5
SCALANCE XC206-2 - update to 4.5
SCALANCE XC206-2G PoE - update to 4.5
SCALANCE XC206-2G PoE EEC - update to 4.5
SCALANCE XC206-2SFP - update to 4.5
SCALANCE XC206-2SFP EEC - update to 4.5
SCALANCE XB205-3 - update to 4.5
SCALANCE XC206-2SFP G EEC - update to 4.5
SCALANCE XC208 - update to 4.5
SCALANCE XC208EEC - update to 4.5
SCALANCE XC208G - update to 4.5
SCALANCE XC208G EEC - update to 4.5
SCALANCE XC208G PoE - update to 4.5
SCALANCE XC216 - update to 4.5
SCALANCE XC216-3G PoE - update to 4.5
SCALANCE XC216-4C - update to 4.5
SCALANCE XC216-4C G - update to 4.5
SCALANCE S615 EEC - update to 8.0
SCALANCE S615 - update to 8.0
SCALANCE MUM856-1 (RoW) - update to 8.0
SCALANCE MUM856-1 (EU) - update to 8.0
SCALANCE MUM853-1 (EU) - update to 8.0
SCALANCE M876-4 (NAM) - update to 8.0
SCALANCE M876-4 (EU) - update to 8.0
SCALANCE M876-4 - update to 8.0
SCALANCE M876-3 (ROK) - update to 8.0
SCALANCE M876-3 (EVDO) - update to 8.0
SCALANCE M874-3 - update to 8.0
SCALANCE M874-2 - update to 8.0
SCALANCE M826-2 SHDSL-Router - update to 8.0
SCALANCE M816-1 ADSL-Router (Annex B) - update to 8.0
SCALANCE M816-1 ADSL-Router (Annex A) - update to 8.0
SCALANCE M812-1 ADSL-Router (Annex B) - update to 8.0
SCALANCE M812-1 ADSL-Router (Annex A) - update to 8.0
SCALANCE M804PB - update to 8.0
RUGGEDCOM RM1224 LTE(4G) NAM - update to 8.0
RUGGEDCOM RM1224 LTE(4G) EU - update to 8.0

• https://cert-portal.siemens.com/productcert/txt/ssa-699386.txt

• Multiple vulnerabilities in Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family
• Multiple vulnerabilities in Siemens SCALANCE M-800/S615 Family