CVE-2022-46351

Published: Dic 13, 2022 Last Modified: Apr 22, 2025 EU-VD ID: EUVD-2022-49167 Aliases: GSD-2022-46351
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,5
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high

Description

AI Translation Available

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0013
Percentile
0,3th
Updated

EPSS Score Trend (Last 90 Days)

400

Uncontrolled Resource Consumption

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: High
View CWE Details
Operating System

6Gk5204-0Bs00-3Pa3 Firmware by Siemens

Product Information
Vendor Siemens
Product 6Gk5204-0Bs00-3Pa3 Firmware
Version Range Affected
To 3.2.7 (exclusive)
cpe:2.3:o:siemens:6gk5204-0bs00-3pa3_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

6Gk5204-0Ba00-2Mb2 Firmware by Siemens

Product Information
Vendor Siemens
Product 6Gk5204-0Ba00-2Mb2 Firmware
Version Range Affected
To 3.2.7 (exclusive)
cpe:2.3:o:siemens:6gk5204-0ba00-2mb2_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

6Gk5204-0Bs00-3La3 Firmware by Siemens

Product Information
Vendor Siemens
Product 6Gk5204-0Bs00-3La3 Firmware
Version Range Affected
To 3.2.7 (exclusive)
cpe:2.3:o:siemens:6gk5204-0bs00-3la3_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

6Gk5204-0Ba00-2Kb2 Firmware by Siemens

Product Information
Vendor Siemens
Product 6Gk5204-0Ba00-2Kb2 Firmware
Version Range Affected
To 3.2.7 (exclusive)
cpe:2.3:o:siemens:6gk5204-0ba00-2kb2_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

6Gk5204-0Bs00-2Na3 Firmware by Siemens

Product Information
Vendor Siemens
Product 6Gk5204-0Bs00-2Na3 Firmware
Version Range Affected
To 3.2.7 (exclusive)
cpe:2.3:o:siemens:6gk5204-0bs00-2na3_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.…
Patch Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.…
Patch Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf