Web Server Vulnerability in Siemens SCALANCE X204RNA Series
CVE-2022-46354

5.3MEDIUM

Key Information:

Summary

A significant vulnerability has been discovered in the Siemens SCALANCE X204RNA series, where the web server of affected products lacks essential security headers. This oversight could permit remote attackers to access confidential session information under specific conditions, posing a threat to data integrity and confidentiality.

Affected Version(s)

SCALANCE X204RNA (HSR) All versions < V3.2.7

SCALANCE X204RNA (PRP) All versions < V3.2.7

SCALANCE X204RNA EEC (HSR) All versions < V3.2.7

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.