SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-36324

This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

HIGH 7.5EPSS 1.71%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.71%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

CVSS 3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.71% probability · 76th percentile
CISA KEV
Not listed
Weakness
CWE-770
Affected
siemens/scalance m-800 firmware · siemens/scalance s615 firmware · siemens/scalance w700 ieee 802.11ax firmware · siemens/scalance w700 ieee 802.11n firmware · siemens/scalance w700 ieee 802.11ac firmware · siemens/scalance xb-200 firmware · siemens/scalance xb205-3 firmware · siemens/scalance xb205-3ld firmware · siemens/scalance xb208 firmware · siemens/scalance xb213-3 firmware · siemens/scalance xb213-3ld firmware · siemens/scalance xb216 firmware · siemens/scalance xc-200 firmware · siemens/scalance xc206-2 firmware · siemens/scalance xc206-2g poe firmware · siemens/scalance xc206-2g poe eec firmware · siemens/scalance xc206-2sfp eec firmware · siemens/scalance xc206-2sfp g firmware · siemens/scalance xc206-2sfp g \(e\/ip\) firmware · siemens/scalance xc206-2sfp g eec firmware · +40 more
Source
productcert@siemens.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.