SSA-506569: Multiple Vulnerabilities in SCALANCE W1750D
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to denial of service, unauthenticated remote code execution or stored XSS. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-37896US | medium6.1 | — | ||
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user… | ||||
| CVE-2022-37895US | medium4.9 | — | ||
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerabi… | ||||
| CVE-2022-37894US | medium6.5 | — | ||
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerabi… | ||||
| CVE-2022-37893US | high7.8 | — | ||
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the a… | ||||
| CVE-2022-37892US | medium5.4 | — | ||
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack… | ||||
| CVE-2022-37891US | critical9.8 | — | ||
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitr… | ||||
| CVE-2022-37890US | critical9.8 | — | ||
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitr… | ||||
| CVE-2022-37889US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2022-37887US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2022-37886US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2022-37885US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2022-37888US | critical9.8 | — | ||
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… | ||||
| CVE-2002-20001US | high7.5 | Exploit | ||
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (72)
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-37893: Restrict the command line interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-37893: Restrict the command line interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37885, CVE-2022-37886, CVE-2022-37887, CVE-2022-37888, CVE-2022-37889: Enable CPSec via the cluster-security command
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37890, CVE-2022-37891, CVE-2022-37892, CVE-2022-37895, CVE-2022-37896: Restrict the web-based management interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-37893: Restrict the command line interface to a dedicated layer 2 segment/VLAN and/or control the interface by firewall policies at layer 3 and above
- BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/ - BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.7.1.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816886/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan