SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-40631US | medium6.1 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0),… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - CSAF Versionself
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - PDF Versionself
- SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families - TXT Versionself
Behebungen (30)
- BehobenSCALANCE X200-4P IRT (6GK5200-4AH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X201-3P IRT (6GK5201-3BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X202-2IRT (6GK5202-2BB10-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X202-2P IRT (6GK5202-2BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X204-2 (6GK5204-2BB10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2FM (6GK5204-2BB11-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD (6GK5204-2BC10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD TS (6GK5204-2BC10-2CA2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2TS (6GK5204-2BB10-2CA2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204IRT (6GK5204-0BA00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X204IRT PRO (6GK5204-0JA00-2BA6)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE X206-1 (6GK5206-1BB10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X206-1LD (6GK5206-1BC10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208 (6GK5208-0BA10-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208PRO (6GK5208-0HA10-2AA6)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2 (6GK5212-2BB00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2LD (6GK5212-2BC00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X216 (6GK5216-0BA00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X224 (6GK5224-0BA00-2AA3)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF201-3P IRT (6GK5201-3BH00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE XF202-2P IRT (6GK5202-2BH00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE XF204 (6GK5204-0BA00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204-2 (6GK5204-2BC00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204-2BA IRT (6GK5204-2AA00-2BD2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE XF204IRT (6GK5204-0BA00-2BF2)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/ - BehobenSCALANCE XF206-1 (6GK5206-1BC00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF208 (6GK5208-0BA00-2AF2)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSIPLUS NET SCALANCE X202-2P IRT (6AG1202-2BH00-2BA3)
Update to V5.5.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109792534/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan