SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-40631US | medium6.1 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0),… | ||||
references
External citations — patches, advisories, analysis.
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - CSAF Versionself
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - PDF Versionself
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - TXT Versionself
remediations (30)
- FixedSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X204-2 (6GK5204-2BB10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2FM (6GK5204-2BB11-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD (6GK5204-2BC10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2LD TS (6GK5204-2BC10-2CA2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204-2TS (6GK5204-2BB10-2CA2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE X206-1 (6GK5206-1BB10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X206-1LD (6GK5206-1BC10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208 (6GK5208-0BA10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X208PRO (6GK5208-0HA10-2AA6)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2 (6GK5212-2BB00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X212-2LD (6GK5212-2BC00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X216 (6GK5216-0BA00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE X224 (6GK5224-0BA00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE XF204 (6GK5204-0BA00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204-2 (6GK5204-2BC00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - FixedSCALANCE XF206-1 (6GK5206-1BC00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSCALANCE XF208 (6GK5208-0BA00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - FixedSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan