CVE-2022-46144

published 2022-12-13

CVE-2022-46144: A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 < V3.0), SCALANCE…

high 7.1 CVSS 4.0

AV N AC L AT N PR L UI N VC N VI N VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Affected

29 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	6gk5622-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5622-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	6gk5626-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5626-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	6gk5632-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5632-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	6gk5636-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5636-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	6gk5642-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5642-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	6gk5646-2gs00-2ac2_firmware	< 2.3	2.3
siemens	6gk5646-2gs00-2ac2_firmware	>= 2.3 < 3.0	3.0
siemens	scalance_sc622-2c	< V2.3	V2.3
siemens	scalance_sc622-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc626-2c	< V2.3	V2.3
siemens	scalance_sc626-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc632-2c	< V2.3	V2.3
siemens	scalance_sc632-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc636-2c	< V2.3	V2.3
siemens	scalance_sc636-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc642-2c	< V2.3	V2.3
siemens	scalance_sc642-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc646-2c	< V2.3	V2.3
siemens	scalance_sc646-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_wam763-1	< V2.0.0	V2.0.0

CWE-664