← Database

CVE-2022-36325

MEDIUM CVSS: 6.8 Published: 2022-08-10 Modified: 2026-06-17

Description

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Affected Platforms

Siemens Scalance Xr324-4M EecSiemens Scalance Xp216Siemens Scalance Xr526-8C L3 FirmwareSiemens Scalance W700 Ieee 802.11Ac FirmwareSiemens Scalance Xb213-3Ld FirmwareSiemens Scalance Xr500Siemens Scalance Xr528-6M 2Hr2 FirmwareSiemens Scalance Xc208G FirmwareSiemens Scalance Xc208G EecSiemens Scalance Xr528-6M 2Hr2 L3 Firmware

Weakness Type

CWE-80, NVD-CWE-Other

References