← Database

CVE-2022-31765

HIGH CVSS: 8.8 Published: 2022-10-11 Modified: 2026-06-17

Description

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Affected Platforms

Siemens 6Gk5524-8Gs00-2Ar2 FirmwareSiemens 6Gk5328-4Fs00-3Ar3Siemens 6Gk5774-1Fx00-0Ab6 FirmwareSiemens 6Gk5786-2Hc00-0Ab0 FirmwareSiemens 6Gk5208-0Ha00-2Es6 FirmwareSiemens 6Gk5766-1Je00-7Da0Siemens 6Gk5208-0Ha00-2Ts6 FirmwareSiemens 6Gk5766-1Ge00-7Tb0Siemens 6Gk5748-1Fc00-0Aa0 FirmwareSiemens 6Gk5766-1Ge00-3Da0 Firmware

Weakness Type

CWE-862

References