CVE-2022-36324

published 2022-08-10

CVE-2022-36324: Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected

92 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rm1224_lte_eu	< V7.1.2	V7.1.2
siemens	ruggedcom_rm1224_lte_nam	< V7.1.2	V7.1.2
siemens	scalance_m804pb	< V7.1.2	V7.1.2
siemens	scalance_m812-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m816-1_adsl-router	< V7.1.2	V7.1.2
siemens	scalance_m826-2_shdsl-router	< V7.1.2	V7.1.2
siemens	scalance_m874-2	< V7.1.2	V7.1.2
siemens	scalance_m874-3	< V7.1.2	V7.1.2
siemens	scalance_m876-3	< V7.1.2	V7.1.2
siemens	scalance_m876-4	< V7.1.2	V7.1.2
siemens	scalance_mum853-1	< V7.1.2	V7.1.2
siemens	scalance_mum856-1	< V7.1.2	V7.1.2
siemens	scalance_s615_lan-router	< V7.1.2	V7.1.2
siemens	scalance_sc622-2c	< V2.3.1	V2.3.1
siemens	scalance_sc626-2c	< V2.3.1	V2.3.1
siemens	scalance_sc632-2c	< V2.3.1	V2.3.1
siemens	scalance_sc636-2c	< V2.3.1	V2.3.1
siemens	scalance_sc642-2c	< V2.3.1	V2.3.1
siemens	scalance_sc646-2c	< V2.3.1	V2.3.1
siemens	scalance_w1748-1_m12	< *	*
siemens	scalance_w1788-1_m12	< *	*
siemens	scalance_w1788-2_eec_m12	< *	*
siemens	scalance_w1788-2_m12	< *	*
siemens	scalance_w1788-2ia_m12	< *	*
siemens	scalance_w721-1_rj45	< V6.6.0	V6.6.0

CWE-770