What’s Vulnerable › Vulnerabilities

CVE-2022-31765

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-11 · updated 2026-06-17
• Weakness: CWE-862

Description

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Affected products

• Siemens 6Ag1206-2Bb00-7Ac2 Firmware: all versions
• Siemens 6Ag1206-2Bs00-7Ac2 Firmware: all versions
• Siemens 6Ag1208-0Ba00-7Ac2 Firmware: all versions
• Siemens 6Ag1216-4Bs00-7Ac2 Firmware: all versions
• Siemens 6Gk5204-0Ba00-2Gf2 Firmware: all versions
• Siemens 6Gk5204-0Ba00-2Yf2 Firmware: all versions
• Siemens 6Gk5204-2Aa00-2Gf2 Firmware: all versions
• Siemens 6Gk5204-2Aa00-2Yf2 Firmware: all versions
• Siemens 6Gk5205-3Bb00-2Ab2 Firmware: all versions
• Siemens 6Gk5205-3Bb00-2Tb2 Firmware: all versions
• Siemens 6Gk5205-3Bd00-2Ab2 Firmware: all versions
• Siemens 6Gk5205-3Bd00-2Tb2 Firmware: all versions
• Siemens 6Gk5205-3Bf00-2Ab2 Firmware: all versions
• Siemens 6Gk5205-3Bf00-2Tb2 Firmware: all versions
• Siemens 6Gk5206-2Bb00-2Ac2 Firmware: all versions
• Siemens 6Gk5206-2Bd00-2Ac2 Firmware: all versions
• Siemens 6Gk5206-2Bs00-2Ac2 Firmware: all versions
• Siemens 6Gk5206-2Bs00-2Fc2 Firmware: all versions
• Siemens 6Gk5206-2Gs00-2Ac2 Firmware: all versions
• Siemens 6Gk5206-2Gs00-2Fc2 Firmware: all versions
• Siemens 6Gk5206-2Gs00-2Tc2 Firmware: all versions
• Siemens 6Gk5206-2Rs00-2Ac2 Firmware: all versions
• Siemens 6Gk5206-2Rs00-5Ac2 Firmware: all versions
• Siemens 6Gk5206-2Rs00-5Fc2 Firmware: all versions
• Siemens 6Gk5208-0Ba00-2Ab2 Firmware: all versions
• Siemens 6Gk5208-0Ba00-2Ac2 Firmware: all versions
• Siemens 6Gk5208-0Ba00-2Fc2 Firmware: all versions
• Siemens 6Gk5208-0Ba00-2Tb2 Firmware: all versions
• Siemens 6Gk5208-0Ga00-2Ac2 Firmware: all versions
• Siemens 6Gk5208-0Ga00-2Fc2 Firmware: all versions

References

• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-552702.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-552702.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-552702.pdf

Get alerted when CVE-2022-31765 or the next vulnerability affects your stack