SB2022071408 - Multiple vulnerabilities in Siemens SCALANCE X Switch Devices
Published: July 14, 2022 Updated: July 14, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Use of insufficiently random values (CVE-ID: CVE-2022-26647)
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the webserver of affected devices calculates session ids and nonces in an insecure manner. A remote attacker can brute-force session ids and hijack existing sessions.
2) Buffer overflow (CVE-ID: CVE-2022-26648)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the GET parameter XNo of incoming HTTP requests. A remote user on the local network can trigger memory corruption and cause a denial of service condition on the target system.
3) Buffer overflow (CVE-ID: CVE-2022-26649)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the the URI of incoming HTTP GET requests. A remote attacker on the local network can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.