What’s Vulnerable › Vulnerabilities

CVE-2022-36325

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-10 · updated 2026-06-17
• Weakness: CWE-80

Description

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Affected products

• Siemens Scalance M-800 Firmware: all versions
• Siemens Scalance S615 Firmware: all versions
• Siemens AG SCALANCE SC-600: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc622-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc632-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc636-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc642-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance Sc646-2C Firmware: before 2.3.1 — fixed in 2.3.1
• Siemens Scalance W700 Ieee 802.11Ac Firmware: all versions
• Siemens Scalance W700 Ieee 802.11Ax Firmware: all versions
• Siemens Scalance W700 Ieee 802.11N Firmware: all versions
• Siemens Scalance Xb-200 Firmware: all versions
• Siemens Scalance Xb205-3 Firmware: all versions
• Siemens Scalance Xb205-3Ld Firmware: all versions
• Siemens Scalance Xb208 Firmware: all versions
• Siemens Scalance Xb213-3 Firmware: all versions
• Siemens Scalance Xb213-3Ld Firmware: all versions
• Siemens Scalance Xb216 Firmware: all versions
• Siemens Scalance Xc-200 Firmware: all versions
• Siemens Scalance Xc206-2 Firmware: all versions
• Siemens Scalance Xc206-2G Poe Firmware: all versions
• Siemens Scalance Xc206-2G Poe Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G (E/Ip) Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Eec Firmware: all versions
• Siemens Scalance Xc206-2Sfp G Firmware: all versions
• Siemens Scalance Xc208 Firmware: all versions
• Siemens Scalance Xc208Eec Firmware: all versions
• Siemens Scalance Xc208G (E/Ip) Firmware: all versions
• Siemens Scalance Xc208G Eec Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens AG SCALANCE SC-600 2.3.1; Siemens Scalance Sc622-2C Firmware 2.3.1; Siemens Scalance Sc632-2C Firmware 2.3.1; Siemens Scalance Sc636-2C Firmware 2.3.1; Siemens Scalance Sc642-2C Firmware 2.3.1; Siemens Scalance Sc646-2C Firmware 2.3.1. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-710008.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf

Get alerted when CVE-2022-36325 or the next vulnerability affects your stack