← Database

CVE-2022-36323

CRITICAL CVSS: 9.1 Published: 2022-08-10 Modified: 2026-06-17

Description

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

Affected Platforms

Siemens Scalance Xr324-4M EecSiemens Scalance Xp216Siemens Scalance Xr526-8C L3 FirmwareSiemens Scalance W700 Ieee 802.11Ac FirmwareSiemens Scalance Xb213-3Ld FirmwareSiemens Scalance Xr500Siemens Scalance Xr528-6M 2Hr2 FirmwareSiemens Scalance Xc208G FirmwareSiemens Scalance Xc208G EecSiemens Scalance Xr528-6M 2Hr2 L3 Firmware

Weakness Type

CWE-74, NVD-CWE-Other

References