What’s Vulnerable › Vulnerabilities

CVE-2022-36324

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-10 · updated 2026-06-17
• Weakness: CWE-770

Description

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected products

• Siemens Scalance M-800 Firmware: all versions
• Siemens Scalance S615 Firmware: all versions
• Siemens Scalance W700 Ieee 802.11Ac Firmware: all versions
• Siemens Scalance W700 Ieee 802.11Ax Firmware: all versions
• Siemens Scalance W700 Ieee 802.11N Firmware: all versions
• Siemens Scalance Xb-200 Firmware: all versions
• Siemens Scalance Xb205-3 Firmware: all versions
• Siemens Scalance Xb205-3Ld Firmware: all versions
• Siemens Scalance Xb208 Firmware: all versions
• Siemens Scalance Xb213-3 Firmware: all versions
• Siemens Scalance Xb213-3Ld Firmware: all versions
• Siemens Scalance Xb216 Firmware: all versions
• Siemens Scalance Xc-200 Firmware: all versions
• Siemens Scalance Xc206-2 Firmware: all versions
• Siemens Scalance Xc206-2G Poe Firmware: all versions
• Siemens Scalance Xc206-2G Poe Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G (E/Ip) Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Firmware: all versions
• Siemens Scalance Xc208 Firmware: all versions
• Siemens Scalance Xc208Eec Firmware: all versions
• Siemens Scalance Xc208G (E/Ip) Firmware: all versions
• Siemens Scalance Xc208G Eec Firmware: all versions
• Siemens Scalance Xc208G Firmware: all versions
• Siemens Scalance Xc208G Poe Firmware: all versions
• Siemens Scalance Xc216-4C Firmware: all versions
• Siemens Scalance Xc216-4C G (E/Ip) Firmware: all versions
• Siemens Scalance Xc216-4C G Eec Firmware: all versions
• Siemens Scalance Xc216-4C G Firmware: all versions

References

• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-710008.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf

Get alerted when CVE-2022-36324 or the next vulnerability affects your stack