Web Server Vulnerability in Siemens SCALANCE X204RNA Series
CVE-2022-46354
5.3MEDIUM
Key Information:
- Vendor
- Siemens
- Status
- Vendor
- CVE Published:
- 13 December 2022
Summary
A significant vulnerability has been discovered in the Siemens SCALANCE X204RNA series, where the web server of affected products lacks essential security headers. This oversight could permit remote attackers to access confidential session information under specific conditions, posing a threat to data integrity and confidentiality.
Affected Version(s)
SCALANCE X204RNA (HSR) All versions < V3.2.7
SCALANCE X204RNA (PRP) All versions < V3.2.7
SCALANCE X204RNA EEC (HSR) All versions < V3.2.7
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved