Skip to content
Sign in
CVE-2022-461446.5MediumCWE-664

CVE-2022-46144: Siemens SCALANCE SC622-2C vulnerability

Siemens · SCALANCE SC622-2C

Vendor fix available · Affected: Siemens SCALANCE SC622-2C · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.9%probability of exploitation in the next 30 days
61st percentile
050100

Higher than 61% of scored CVEs

6.5MediumCVSS 3.1
LowMedium

DescriptionCVE.org

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Siemens · SCALANCE SC622-2Cbefore V2.3
  • Siemens · SCALANCE SC622-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE SC626-2Cbefore V2.3
  • Siemens · SCALANCE SC626-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE SC632-2Cbefore V2.3
  • Siemens · SCALANCE SC632-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE SC636-2Cbefore V2.3
  • Siemens · SCALANCE SC636-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE SC642-2Cbefore V2.3
  • Siemens · SCALANCE SC642-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE SC646-2Cbefore V2.3
  • Siemens · SCALANCE SC646-2Cfrom V2.3 before V3.0
  • Siemens · SCALANCE WAM763-1before V2.0.0
  • Siemens · SCALANCE WAM766-1before V2.0.0
  • Siemens · SCALANCE WAM766-1 (US)before V2.0.0
  • Siemens · SCALANCE WAM766-1 EECbefore V2.0.0
  • Siemens · SCALANCE WAM766-1 EEC (US)before V2.0.0
  • Siemens · SCALANCE WUM763-1before V2.0.0
  • Siemens · SCALANCE WUM763-1before V2.0.0
  • Siemens · SCALANCE WUM766-1before V2.0.0

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Weakness
Improper Control of a Resource Through its Lifetime · Other weaknesses
Vendor
Siemens
Published
December 2022
Band
Unlikely (under 1%), December 2022

CoverageNo articles yet

No CyberSIXT article names CVE-2022-46144 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in