CVE-2022-46144

siemens 6gk5622-2gs00-2ac2 firmware, siemens 6gk5626-2gs00-2ac2 firmware, siemens 6gk5632-2gs00-2ac2 firmware +3 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-46144

Katalog CVE

CVSS 6.5 · Medium EPSS 0,93%

Kerentanan Improper Control of a Resource Through its Lifetime pada siemens 6gk5622-2gs00-2ac2 firmware, siemens 6gk5626-2gs00-2ac2 firmware +4 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Rincian

Terbit di NVD
13 Desember 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber siemens.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-664: Improper Control of a Resource Through its Lifetime
EPSS (30 hari)
0,93% peluang dieksploitasi; lebih tinggi dari 59,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
siemens 6gk5622-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5626-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5632-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5636-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5642-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5646-2gs00-2ac2 firmware Versi 2.3 hingga sebelum 3.0
siemens 6gk5622-2gs00-2ac2 firmware Semua versi sebelum 2.3
siemens 6gk5626-2gs00-2ac2 firmware Semua versi sebelum 2.3
siemens 6gk5632-2gs00-2ac2 firmware Semua versi sebelum 2.3
siemens 6gk5636-2gs00-2ac2 firmware Semua versi sebelum 2.3
siemens 6gk5642-2gs00-2ac2 firmware Semua versi sebelum 2.3
siemens 6gk5646-2gs00-2ac2 firmware Semua versi sebelum 2.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.