CVE Feed

    Dashboard / CVE / CVE-2022-46350

    CVE-2022-46350

    A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.

    Published:Dec 13, 2022
    Last Modified:Apr 22, 2025
    EPS:Dec 13, 2022
    EPSS Score:0.00772
    CVSS Score:6.1

    Affected Products

    Vendor
    Siemens
    Product
    6gk5204-0ba00-2kb2
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2kb2 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2mb2
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2mb2 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-2na3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-2na3 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3la3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3la3 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3pa3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3pa3 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High