Denial of Service Vulnerability in SCALANCE X204RNA Products by Siemens
CVE-2022-46351

5.5MEDIUM

Key Information:

Vendor

Siemens
Status
Scalance X204rna (hsr)
Scalance X204rna (prp)
Scalance X204rna Eec (hsr)
Scalance X204rna Eec (prp)
Vendor
CVE Published:
13 December 2022

What is CVE-2022-46351?

A vulnerability has been found in multiple versions of SCALANCE X204RNA products by Siemens. Specifically, the flaw allows specially crafted PROFINET DCP packets to trigger a denial of service condition within affected devices on a local Ethernet segment (Layer 2). Systems using versions lower than V3.2.7 are at risk and may experience disruptions in network services due to this vulnerability.

Affected Version(s)

SCALANCE X204RNA (HSR) All versions < V3.2.7

SCALANCE X204RNA (PRP) All versions < V3.2.7

SCALANCE X204RNA EEC (HSR) All versions < V3.2.7

References

https://cert-portal.siemens.com/productcert/pdf/ssa-36382...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.