CVE Feed

    Dashboard / CVE / CVE-2022-46354

    CVE-2022-46354

    A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The webserver of an affected device is missing specific security headers. This could allow an remote attacker to extract confidential session information under certain circumstances.

    Published:Dec 13, 2022
    Last Modified:Apr 22, 2025
    EPS:Dec 13, 2022
    EPSS Score:0.00304
    CVSS Score:5.3

    Affected Products

    Vendor
    Siemens
    Product
    6gk5204-0ba00-2kb2
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2kb2 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2mb2
    Vendor
    Siemens
    Product
    6gk5204-0ba00-2mb2 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-2na3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-2na3 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3la3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3la3 Firmware
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3pa3
    Vendor
    Siemens
    Product
    6gk5204-0bs00-3pa3 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High