Details of VAR-202208-0610

ID

VAR-202208-0610

CVE

CVE-2022-36324

TITLE

Vulnerability in limiting or non-slotting resource allocation in multiple Siemens products

Trust: 0.8

sources: JVNDB: JVNDB-2022-014932

DESCRIPTION

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack. SCALANCE M-800 firmware, SCALANCE S615 firmware, scalance w700 ieee 802.11ax Multiple Siemens products, including firmware, contain vulnerabilities related to limited or unthrottled resource allocation.Service operation interruption (DoS) It may be in a state. The SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 industrial routers are used for secure remote access to plants via mobile networks (e.g. GPRS or UMTS) and have integrated security functions for firewalls to prevent unauthorized access, as well as VPN to Secure data transmission. SCALANCE SC-600 devices (SC622-2C, SC632-2C, SC636-2C, SC642-2C, SC646-2C) are used to protect trusted industrial networks from untrusted network attacks. They allow filtering incoming and outgoing network connections in different ways. The SCALANCE W-1700 product is a wireless communication device based on the IEEE 802.11ac standard. SCALANCE W-700 products are wireless communication devices based on the IEEE 802.11ax standard. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI). A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions)

Trust: 2.25

sources: NVD: CVE-2022-36324 // JVNDB: JVNDB-2022-014932 // CNVD: CNVD-2022-56475 // VULMON: CVE-2022-36324

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2022-56475

AFFECTED PRODUCTS

vendor:	シーメンス	model:	scalance xc206-2sfp g	scope:	-	version:	-	Trust: 1.6
vendor:	siemens	model:	scalance xr552-12m 2hr2	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2g poe eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance w700 ieee 802.11ac	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb216	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr524-8c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb205-3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc224	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb208	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324-4m poe ts	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324wg	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr524-8c l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c g eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c g \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr528-6m l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324-12m ts	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc-200	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324-4m poe	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr528-6m	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xf204-2ba irt	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm400	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr-300eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr500	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp208 \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance w700 ieee 802.11n	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb213-3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm408-8c l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp216	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp216poe eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr552-12m	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm416-4c l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208g \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr552	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr-300	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr328-4c wg	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2g poe	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp208poe eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr526-8c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c g	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb-200	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb205-3ld	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp216 \	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xf204-2ba dna	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xf-200ba	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr528-6m 2hr2	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp208	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm408-8c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr-300poe	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr552-12m 2hr2 l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208g poe	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance w700 ieee 802.11ax	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xb213-3ld	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm408-4c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm408-4c l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr326-2c poe wg	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr552-12	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp208eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324-12m	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr524	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp-200	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance s615	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208g eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr528-6m 2hr2 l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xp216eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr324-4m eec	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr528	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc208g	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance m-800	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xm416-4c	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr526-8c l3	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr526	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	scalance xr-300wg	scope:	eq	version:	*	Trust: 1.0
vendor:	シーメンス	model:	scalance xb205-3	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc206-2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb-200	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb216	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance w700 ieee 802.11ax	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc-200	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc206-2sfp g eec	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance m-800	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb213-3ld	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb213-3	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc206-2g poe eec	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance w700 ieee 802.11n	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance w700 ieee 802.11ac	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb205-3ld	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance s615	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc206-2sfp eec	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xb208	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	scalance xc206-2g poe	scope:	-	version:	-	Trust: 0.8
vendor:	siemens	model:	scalance m-800 s615	scope:	eq	version:	/	Trust: 0.6
vendor:	siemens	model:	scalance w-700 ieee 802.11ax family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance w-700 ieee 802.11n family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance w-1700 ieee 802.11ac family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xb-200 switch family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xc-200 switch family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xf-200ba switch family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xm-400 family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xp-200 switch family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xr-300wg switch family	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	scalance xr-500 family	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2022-56475 // JVNDB: JVNDB-2022-014932 // NVD: CVE-2022-36324

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-36324
value:	HIGH
Trust: 1.0
productcert@siemens.com:	CVE-2022-36324
value:	HIGH
Trust: 1.0
NVD:	CVE-2022-36324
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2022-56475
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202208-2714
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2022-56475
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2022-36324
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 2.0
NVD:	CVE-2022-36324
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2022-56475 // JVNDB: JVNDB-2022-014932 // CNNVD: CNNVD-202208-2714 // NVD: CVE-2022-36324 // NVD: CVE-2022-36324

PROBLEMTYPE DATA

problemtype:	CWE-770	Trust: 1.0
problemtype:	Allocation of resources without limits or throttling (CWE-770) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-014932 // NVD: CVE-2022-36324

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202208-2714

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202208-2714

PATCH

title:	Patch for Unknown Vulnerability in Siemens SCALANCE Products	url:	https://www.cnvd.org.cn/patchInfo/show/343621	Trust: 0.6
title:	Multiple Siemens SCALANCE Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=207453	Trust: 0.6

sources: CNVD: CNVD-2022-56475 // CNNVD: CNNVD-202208-2714

EXTERNAL IDS

db:	NVD	id:	CVE-2022-36324	Trust: 3.9
db:	SIEMENS	id:	SSA-710008	Trust: 3.1
db:	ICS CERT	id:	ICSA-22-223-07	Trust: 1.5
db:	JVN	id:	JVNVU90767165	Trust: 0.8
db:	JVNDB	id:	JVNDB-2022-014932	Trust: 0.8
db:	CNVD	id:	CNVD-2022-56475	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.4032	Trust: 0.6
db:	CNNVD	id:	CNNVD-202208-2714	Trust: 0.6
db:	VULMON	id:	CVE-2022-36324	Trust: 0.1

sources: CNVD: CNVD-2022-56475 // VULMON: CVE-2022-36324 // JVNDB: JVNDB-2022-014932 // CNNVD: CNNVD-202208-2714 // NVD: CVE-2022-36324

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf	Trust: 2.5
url:	https://jvn.jp/vu/jvnvu90767165/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2022-36324	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-22-223-07	Trust: 0.8
url:	https://cert-portal.siemens.com/productcert/html/ssa-710008.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.4032	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2022-36324/	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsa-22-223-07	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/770.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-07	Trust: 0.1

sources: CNVD: CNVD-2022-56475 // VULMON: CVE-2022-36324 // JVNDB: JVNDB-2022-014932 // CNNVD: CNNVD-202208-2714 // NVD: CVE-2022-36324

CREDITS

Siemens has reported these vulnerabilities to CISA.

Trust: 0.6

sources: CNNVD: CNNVD-202208-2714

SOURCES

db:	CNVD	id:	CNVD-2022-56475
db:	VULMON	id:	CVE-2022-36324
db:	JVNDB	id:	JVNDB-2022-014932
db:	CNNVD	id:	CNNVD-202208-2714
db:	NVD	id:	CVE-2022-36324

LAST UPDATE DATE

2024-08-14T14:17:48.847000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2022-56475	date:	2022-08-12T00:00:00
db:	VULMON	id:	CVE-2022-36324	date:	2022-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2022-014932	date:	2023-09-22T08:25:00
db:	CNNVD	id:	CNNVD-202208-2714	date:	2022-09-14T00:00:00
db:	NVD	id:	CVE-2022-36324	date:	2023-02-23T16:19:42.137

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2022-56475	date:	2022-08-12T00:00:00
db:	VULMON	id:	CVE-2022-36324	date:	2022-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2022-014932	date:	2023-09-22T00:00:00
db:	CNNVD	id:	CNNVD-202208-2714	date:	2022-08-10T00:00:00
db:	NVD	id:	CVE-2022-36324	date:	2022-08-10T12:15:12.930