{"id":"CVE-2022-36323","aliases":["EUVD-2022-39039","GHSA-qj75-j4wq-j748"],"status":"published","title":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600...","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01934,"percentile":0.802,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-74"],"published":"2022-08-10T11:18:33Z","modified":"2026-06-17T04:53:14Z","products":[{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) eu"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) nam"},{"vendor":"siemens","product":"scalance m804pb"},{"vendor":"siemens","product":"scalance m812-1 adsl-router"},{"vendor":"siemens","product":"scalance m816-1 adsl-router"},{"vendor":"siemens","product":"scalance m826-2 shdsl-router"},{"vendor":"siemens","product":"scalance m874-2"},{"vendor":"siemens","product":"scalance m874-3"},{"vendor":"siemens","product":"scalance m876-3"},{"vendor":"siemens","product":"scalance m876-3 (rok)"},{"vendor":"siemens","product":"scalance m876-4 (eu)"},{"vendor":"siemens","product":"scalance m876-4 (nam)"},{"vendor":"siemens","product":"scalance mum853-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (row)"},{"vendor":"siemens","product":"scalance s615 lan-router"},{"vendor":"siemens","product":"scalance sc622-2c"},{"vendor":"siemens","product":"scalance sc626-2c"},{"vendor":"siemens","product":"scalance sc632-2c"},{"vendor":"siemens","product":"scalance sc636-2c"},{"vendor":"siemens","product":"scalance sc642-2c"},{"vendor":"siemens","product":"scalance sc646-2c"},{"vendor":"siemens","product":"scalance w1748-1 m12"},{"vendor":"siemens","product":"scalance w1788-1 m12"},{"vendor":"siemens","product":"scalance w1788-2 eec m12"},{"vendor":"siemens","product":"scalance w1788-2 m12"},{"vendor":"siemens","product":"scalance w1788-2ia m12"},{"vendor":"siemens","product":"scalance w721-1 rj45"},{"vendor":"siemens","product":"scalance w722-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w738-1 m12"},{"vendor":"siemens","product":"scalance w748-1 m12"},{"vendor":"siemens","product":"scalance w748-1 rj45"},{"vendor":"siemens","product":"scalance w761-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 m12 eec"},{"vendor":"siemens","product":"scalance w774-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w778-1 m12"},{"vendor":"siemens","product":"scalance w778-1 m12 eec"},{"vendor":"siemens","product":"scalance w778-1 m12 eec (usa)"},{"vendor":"siemens","product":"scalance w786-1 rj45"},{"vendor":"siemens","product":"scalance w786-2 rj45"},{"vendor":"siemens","product":"scalance w786-2 sfp"},{"vendor":"siemens","product":"scalance w786-2ia rj45"},{"vendor":"siemens","product":"scalance w788-1 m12"},{"vendor":"siemens","product":"scalance w788-1 rj45"},{"vendor":"siemens","product":"scalance w788-2 m12"},{"vendor":"siemens","product":"scalance w788-2 m12 eec"},{"vendor":"siemens","product":"scalance w788-2 rj45"},{"vendor":"siemens","product":"scalance wam763-1"},{"vendor":"siemens","product":"scalance wam766-1"},{"vendor":"siemens","product":"scalance wam766-1 (us)"},{"vendor":"siemens","product":"scalance wam766-1 eec"},{"vendor":"siemens","product":"scalance wam766-1 eec (us)"},{"vendor":"siemens","product":"scalance wum763-1"},{"vendor":"siemens","product":"scalance wum766-1"},{"vendor":"siemens","product":"scalance wum766-1 (usa)"},{"vendor":"siemens","product":"scalance xb205-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb205-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb208 (e/ip)"},{"vendor":"siemens","product":"scalance xb208 (pn)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb213-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb216 (e/ip)"},{"vendor":"siemens","product":"scalance xb216 (pn)"},{"vendor":"siemens","product":"scalance xc206-2 (sc)"},{"vendor":"siemens","product":"scalance xc206-2 (st/bfoc)"},{"vendor":"siemens","product":"scalance xc206-2g poe"},{"vendor":"siemens","product":"scalance xc206-2g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2g poe eec (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2sfp"},{"vendor":"siemens","product":"scalance xc206-2sfp eec"},{"vendor":"siemens","product":"scalance xc206-2sfp g"},{"vendor":"siemens","product":"scalance xc206-2sfp g (eip def.)"},{"vendor":"siemens","product":"scalance xc206-2sfp g eec"},{"vendor":"siemens","product":"scalance xc208"},{"vendor":"siemens","product":"scalance xc208eec"},{"vendor":"siemens","product":"scalance xc208g"},{"vendor":"siemens","product":"scalance xc208g (eip def.)"},{"vendor":"siemens","product":"scalance xc208g eec"},{"vendor":"siemens","product":"scalance xc208g poe"},{"vendor":"siemens","product":"scalance xc208g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216"},{"vendor":"siemens","product":"scalance xc216-3g poe"},{"vendor":"siemens","product":"scalance xc216-3g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216-4c"},{"vendor":"siemens","product":"scalance xc216-4c g"},{"vendor":"siemens","product":"scalance xc216-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc216-4c g eec"},{"vendor":"siemens","product":"scalance xc216eec"},{"vendor":"siemens","product":"scalance xc224"},{"vendor":"siemens","product":"scalance xc224-4c g"},{"vendor":"siemens","product":"scalance xc224-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc224-4c g eec"},{"vendor":"siemens","product":"scalance xf204"},{"vendor":"siemens","product":"scalance xf204 dna"},{"vendor":"siemens","product":"scalance xf204-2ba"},{"vendor":"siemens","product":"scalance xf204-2ba dna"},{"vendor":"siemens","product":"scalance xm408-4c"},{"vendor":"siemens","product":"scalance xm408-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xm408-8c"},{"vendor":"siemens","product":"scalance xm408-8c (l3 int.)"},{"vendor":"siemens","product":"scalance xm416-4c"},{"vendor":"siemens","product":"scalance xm416-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xp208"},{"vendor":"siemens","product":"scalance xp208 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp208eec"},{"vendor":"siemens","product":"scalance xp208poe eec"},{"vendor":"siemens","product":"scalance xp216"},{"vendor":"siemens","product":"scalance xp216 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp216eec"},{"vendor":"siemens","product":"scalance xp216poe eec"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, ac 230v)"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, dc 24v)"},{"vendor":"siemens","product":"scalance xr326-2c poe wg"},{"vendor":"siemens","product":"scalance xr326-2c poe wg (without ul)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge, 24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge,dc24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe,4xge,ac230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, ac 230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, dc 24v)"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 24v"},{"vendor":"siemens","product":"scalance xr524-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 24v"},{"vendor":"siemens","product":"scalance xr526-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2)"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2, l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m (l3 int.)"},{"vendor":"siemens","product":"scalance xr552-12m"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2)"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2, l3 int.)"},{"vendor":"siemens","product":"scalance_m-800_firmware"},{"vendor":"siemens","product":"scalance_s615_firmware"},{"vendor":"siemens","product":"scalance_sc-600_firmware"},{"vendor":"siemens","product":"scalance_sc622-2c_firmware"},{"vendor":"siemens","product":"scalance_sc632-2c_firmware"},{"vendor":"siemens","product":"scalance_sc636-2c_firmware"},{"vendor":"siemens","product":"scalance_sc642-2c_firmware"},{"vendor":"siemens","product":"scalance_sc646-2c_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11ac_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11ax_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11n_firmware"},{"vendor":"siemens","product":"scalance_xb-200_firmware"},{"vendor":"siemens","product":"scalance_xb205-3_firmware"},{"vendor":"siemens","product":"scalance_xb205-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb208_firmware"},{"vendor":"siemens","product":"scalance_xb213-3_firmware"},{"vendor":"siemens","product":"scalance_xb213-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb216_firmware"},{"vendor":"siemens","product":"scalance_xc-200_firmware"},{"vendor":"siemens","product":"scalance_xc206-2_firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe__firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_firmware"},{"vendor":"siemens","product":"scalance_xc208_firmware"},{"vendor":"siemens","product":"scalance_xc208eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc208g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_firmware"},{"vendor":"siemens","product":"scalance_xc208g_poe_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_firmware"},{"vendor":"siemens","product":"scalance_xc216_firmware"},{"vendor":"siemens","product":"scalance_xc216eec_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g__firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc224__firmware"},{"vendor":"siemens","product":"scalance_xf-200ba_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_irt_firmware"},{"vendor":"siemens","product":"scalance_xm400_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xp-200_firmware"},{"vendor":"siemens","product":"scalance_xp208_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp208_firmware"},{"vendor":"siemens","product":"scalance_xp208eec_firmware"},{"vendor":"siemens","product":"scalance_xp208poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xp216_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp216_firmware"},{"vendor":"siemens","product":"scalance_xp216eec_firmware"},{"vendor":"siemens","product":"scalance_xp216poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xr-300_firmware"},{"vendor":"siemens","product":"scalance_xr-300eec_firmware"},{"vendor":"siemens","product":"scalance_xr-300poe_firmware"},{"vendor":"siemens","product":"scalance_xr-300wg_firmware"},{"vendor":"siemens","product":"scalance_xr324-12m_firmware"},{"vendor":"siemens","product":"scalance_xr324-12m_ts_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_eec_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_poe_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_poe_ts_firmware"},{"vendor":"siemens","product":"scalance_xr324wg_firmware"},{"vendor":"siemens","product":"scalance_xr326-2c_poe_wg_firmware"},{"vendor":"siemens","product":"scalance_xr328-4c_wg_firmware"},{"vendor":"siemens","product":"scalance_xr500_firmware"},{"vendor":"siemens","product":"scalance_xr524-8c_firmware"},{"vendor":"siemens","product":"scalance_xr524-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xr524_firmware"},{"vendor":"siemens","product":"scalance_xr526-8c_firmware"},{"vendor":"siemens","product":"scalance_xr526-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xr526_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_2hr2_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_2hr2_l3_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_l3_firmware"},{"vendor":"siemens","product":"scalance_xr528_firmware"},{"vendor":"siemens","product":"scalance_xr552-12_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_2hr2_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_2hr2_l3_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_firmware"},{"vendor":"siemens","product":"scalance_xr552_firmware"},{"vendor":"siemens","product":"siplus net scalance xc206-2"},{"vendor":"siemens","product":"siplus net scalance xc206-2sfp"},{"vendor":"siemens","product":"siplus net scalance xc208"},{"vendor":"siemens","product":"siplus net scalance xc216-4c"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-710008.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36323"},{"url":"https://github.com/advisories/GHSA-qj75-j4wq-j748"}],"sources":{"cve":[{"id":"CVE-2022-36323","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.","status":"published","published":"2022-08-10T11:18:33Z","modified":"2026-04-14T08:35:24.621Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39039","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.","status":"published","published":"2022-08-10T11:18:33Z","modified":"2026-04-14T08:35:24Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical"}],"updated_at":"2026-11-02T19:24:27.052992Z"}],"ghsa":[{"id":"GHSA-qj75-j4wq-j748","title":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600...","description":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE SC-600 family (All versions \u003c V2.3.1), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions). Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.","status":"published","published":"2022-08-11T00:00:22Z","modified":"2026-04-14T09:31:43Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:07:28.42851Z"}],"nvd":[{"id":"CVE-2022-36323","description":"Affected devices do not properly sanitize an input field.  This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.","status":"published","published":"2022-08-10T12:15:12.863Z","modified":"2026-06-17T04:53:14.087Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}