Unrated severityNVD Advisory· Published Dec 13, 2022· Updated Apr 22, 2025

CVE-2022-46355

Description

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The affected products are vulnerable to an "Exposure of Sensitive Information to an Unauthorized Actor" vulnerability by leaking sensitive data in the HTTP Referer.

Affected products

Siemens Foundation/SCALANCE X204RNA (HSR)llm-create
Range: < V3.2.7
Siemens Foundation/SCALANCE X204RNA (PRP)llm-create
Range: < V3.2.7
Siemens Foundation/SCALANCE X204RNA EEC (PRP/HSR)llm-create4 versions
< V3.2.7+ 3 more
- (no CPE)range: < V3.2.7
- (no CPE)range: All versions < V3.2.7
- (no CPE)range: All versions < V3.2.7
- (no CPE)range: All versions < V3.2.7
Siemens Foundation/Scalance X204rna Firmwarecpe-rescue2 versions
All versions < V3.2.7+ 1 more
- (no CPE)range: All versions < V3.2.7
- (no CPE)range: All versions < V3.2.7

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cert-portal.siemens.com/productcert/pdf/ssa-363821.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000