What’s Vulnerable › Vulnerabilities

CVE-2022-36323

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-10 · updated 2026-06-17
• Weakness: CWE-74

Description

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected products

• Siemens Scalance M-800 Firmware: all versions
• Siemens Scalance S615 Firmware: all versions
• Siemens AG SCALANCE SC-600: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc622-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc632-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc636-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc642-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc646-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance W700 Ieee 802.11Ac Firmware: all versions
• Siemens Scalance W700 Ieee 802.11Ax Firmware: all versions
• Siemens Scalance W700 Ieee 802.11N Firmware: all versions
• Siemens Scalance Xb-200 Firmware: all versions
• Siemens Scalance Xb205-3 Firmware: all versions
• Siemens Scalance Xb205-3Ld Firmware: all versions
• Siemens Scalance Xb208 Firmware: all versions
• Siemens Scalance Xb213-3 Firmware: all versions
• Siemens Scalance Xb213-3Ld Firmware: all versions
• Siemens Scalance Xb216 Firmware: all versions
• Siemens Scalance Xc-200 Firmware: all versions
• Siemens Scalance Xc206-2 Firmware: all versions
• Siemens Scalance Xc206-2G Poe Firmware: all versions
• Siemens Scalance Xc206-2G Poe Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G (E/Ip) Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Firmware: all versions
• Siemens Scalance Xc208 Firmware: all versions
• Siemens Scalance Xc208Eec Firmware: all versions
• Siemens Scalance Xc208G (E/Ip) Firmware: all versions
• Siemens Scalance Xc208G Eec Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens AG SCALANCE SC-600 2.3.1; Siemens Scalance Sc622-2C Firmware 2.3.1; Siemens Scalance Sc632-2C Firmware 2.3.1; Siemens Scalance Sc636-2C Firmware 2.3.1; Siemens Scalance Sc642-2C Firmware 2.3.1; Siemens Scalance Sc646-2C Firmware 2.3.1. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-710008.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf

Get alerted when CVE-2022-36323 or the next vulnerability affects your stack