{"id":"CVE-2022-36324","aliases":["EUVD-2022-39040","GHSA-hm3h-qvm3-r8qv"],"status":"published","title":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE W-1700 IEEE...","description":"Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01796,"percentile":0.78592,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2022-08-10T11:18:39Z","modified":"2026-06-17T04:53:14Z","products":[{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) eu"},{"vendor":"siemens","product":"ruggedcom rm1224 lte(4g) nam"},{"vendor":"siemens","product":"scalance m804pb"},{"vendor":"siemens","product":"scalance m812-1 adsl-router"},{"vendor":"siemens","product":"scalance m816-1 adsl-router"},{"vendor":"siemens","product":"scalance m826-2 shdsl-router"},{"vendor":"siemens","product":"scalance m874-2"},{"vendor":"siemens","product":"scalance m874-3"},{"vendor":"siemens","product":"scalance m876-3"},{"vendor":"siemens","product":"scalance m876-3 (rok)"},{"vendor":"siemens","product":"scalance m876-4 (eu)"},{"vendor":"siemens","product":"scalance m876-4 (nam)"},{"vendor":"siemens","product":"scalance mum853-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (eu)"},{"vendor":"siemens","product":"scalance mum856-1 (row)"},{"vendor":"siemens","product":"scalance s615 lan-router"},{"vendor":"siemens","product":"scalance sc622-2c"},{"vendor":"siemens","product":"scalance sc626-2c"},{"vendor":"siemens","product":"scalance sc632-2c"},{"vendor":"siemens","product":"scalance sc636-2c"},{"vendor":"siemens","product":"scalance sc642-2c"},{"vendor":"siemens","product":"scalance sc646-2c"},{"vendor":"siemens","product":"scalance w1748-1 m12"},{"vendor":"siemens","product":"scalance w1788-1 m12"},{"vendor":"siemens","product":"scalance w1788-2 eec m12"},{"vendor":"siemens","product":"scalance w1788-2 m12"},{"vendor":"siemens","product":"scalance w1788-2ia m12"},{"vendor":"siemens","product":"scalance w721-1 rj45"},{"vendor":"siemens","product":"scalance w722-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45"},{"vendor":"siemens","product":"scalance w734-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w738-1 m12"},{"vendor":"siemens","product":"scalance w748-1 m12"},{"vendor":"siemens","product":"scalance w748-1 rj45"},{"vendor":"siemens","product":"scalance w761-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 m12 eec"},{"vendor":"siemens","product":"scalance w774-1 rj45"},{"vendor":"siemens","product":"scalance w774-1 rj45 (usa)"},{"vendor":"siemens","product":"scalance w778-1 m12"},{"vendor":"siemens","product":"scalance w778-1 m12 eec"},{"vendor":"siemens","product":"scalance w778-1 m12 eec (usa)"},{"vendor":"siemens","product":"scalance w786-1 rj45"},{"vendor":"siemens","product":"scalance w786-2 rj45"},{"vendor":"siemens","product":"scalance w786-2 sfp"},{"vendor":"siemens","product":"scalance w786-2ia rj45"},{"vendor":"siemens","product":"scalance w788-1 m12"},{"vendor":"siemens","product":"scalance w788-1 rj45"},{"vendor":"siemens","product":"scalance w788-2 m12"},{"vendor":"siemens","product":"scalance w788-2 m12 eec"},{"vendor":"siemens","product":"scalance w788-2 rj45"},{"vendor":"siemens","product":"scalance wam763-1"},{"vendor":"siemens","product":"scalance wam766-1"},{"vendor":"siemens","product":"scalance wam766-1 (us)"},{"vendor":"siemens","product":"scalance wam766-1 eec"},{"vendor":"siemens","product":"scalance wam766-1 eec (us)"},{"vendor":"siemens","product":"scalance wum763-1"},{"vendor":"siemens","product":"scalance wum766-1"},{"vendor":"siemens","product":"scalance wum766-1 (usa)"},{"vendor":"siemens","product":"scalance xb205-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb205-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb205-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb208 (e/ip)"},{"vendor":"siemens","product":"scalance xb208 (pn)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (sc, pn)"},{"vendor":"siemens","product":"scalance xb213-3 (st, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3 (st, pn)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, e/ip)"},{"vendor":"siemens","product":"scalance xb213-3ld (sc, pn)"},{"vendor":"siemens","product":"scalance xb216 (e/ip)"},{"vendor":"siemens","product":"scalance xb216 (pn)"},{"vendor":"siemens","product":"scalance xc206-2 (sc)"},{"vendor":"siemens","product":"scalance xc206-2 (st/bfoc)"},{"vendor":"siemens","product":"scalance xc206-2g poe"},{"vendor":"siemens","product":"scalance xc206-2g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2g poe eec (54 v dc)"},{"vendor":"siemens","product":"scalance xc206-2sfp"},{"vendor":"siemens","product":"scalance xc206-2sfp eec"},{"vendor":"siemens","product":"scalance xc206-2sfp g"},{"vendor":"siemens","product":"scalance xc206-2sfp g (eip def.)"},{"vendor":"siemens","product":"scalance xc206-2sfp g eec"},{"vendor":"siemens","product":"scalance xc208"},{"vendor":"siemens","product":"scalance xc208eec"},{"vendor":"siemens","product":"scalance xc208g"},{"vendor":"siemens","product":"scalance xc208g (eip def.)"},{"vendor":"siemens","product":"scalance xc208g eec"},{"vendor":"siemens","product":"scalance xc208g poe"},{"vendor":"siemens","product":"scalance xc208g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216"},{"vendor":"siemens","product":"scalance xc216-3g poe"},{"vendor":"siemens","product":"scalance xc216-3g poe (54 v dc)"},{"vendor":"siemens","product":"scalance xc216-4c"},{"vendor":"siemens","product":"scalance xc216-4c g"},{"vendor":"siemens","product":"scalance xc216-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc216-4c g eec"},{"vendor":"siemens","product":"scalance xc216eec"},{"vendor":"siemens","product":"scalance xc224"},{"vendor":"siemens","product":"scalance xc224-4c g"},{"vendor":"siemens","product":"scalance xc224-4c g (eip def.)"},{"vendor":"siemens","product":"scalance xc224-4c g eec"},{"vendor":"siemens","product":"scalance xf204"},{"vendor":"siemens","product":"scalance xf204 dna"},{"vendor":"siemens","product":"scalance xf204-2ba"},{"vendor":"siemens","product":"scalance xf204-2ba dna"},{"vendor":"siemens","product":"scalance xm408-4c"},{"vendor":"siemens","product":"scalance xm408-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xm408-8c"},{"vendor":"siemens","product":"scalance xm408-8c (l3 int.)"},{"vendor":"siemens","product":"scalance xm416-4c"},{"vendor":"siemens","product":"scalance xm416-4c (l3 int.)"},{"vendor":"siemens","product":"scalance xp208"},{"vendor":"siemens","product":"scalance xp208 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp208eec"},{"vendor":"siemens","product":"scalance xp208poe eec"},{"vendor":"siemens","product":"scalance xp216"},{"vendor":"siemens","product":"scalance xp216 (ethernet/ip)"},{"vendor":"siemens","product":"scalance xp216eec"},{"vendor":"siemens","product":"scalance xp216poe eec"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, ac 230v)"},{"vendor":"siemens","product":"scalance xr324wg (24 x fe, dc 24v)"},{"vendor":"siemens","product":"scalance xr326-2c poe wg"},{"vendor":"siemens","product":"scalance xr326-2c poe wg (without ul)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge, 24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe, 4xge,dc24v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (24xfe,4xge,ac230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, ac 230v)"},{"vendor":"siemens","product":"scalance xr328-4c wg (28xge, dc 24v)"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 24v"},{"vendor":"siemens","product":"scalance xr524-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr524-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 1x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 24v"},{"vendor":"siemens","product":"scalance xr526-8c, 24v (l3 int.)"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v"},{"vendor":"siemens","product":"scalance xr526-8c, 2x230v (l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2)"},{"vendor":"siemens","product":"scalance xr528-6m (2hr2, l3 int.)"},{"vendor":"siemens","product":"scalance xr528-6m (l3 int.)"},{"vendor":"siemens","product":"scalance xr552-12m"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2)"},{"vendor":"siemens","product":"scalance xr552-12m (2hr2, l3 int.)"},{"vendor":"siemens","product":"scalance_m-800_firmware"},{"vendor":"siemens","product":"scalance_s615_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11ac_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11ax_firmware"},{"vendor":"siemens","product":"scalance_w700_ieee_802.11n_firmware"},{"vendor":"siemens","product":"scalance_xb-200_firmware"},{"vendor":"siemens","product":"scalance_xb205-3_firmware"},{"vendor":"siemens","product":"scalance_xb205-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb208_firmware"},{"vendor":"siemens","product":"scalance_xb213-3_firmware"},{"vendor":"siemens","product":"scalance_xb213-3ld_firmware"},{"vendor":"siemens","product":"scalance_xb216_firmware"},{"vendor":"siemens","product":"scalance_xc-200_firmware"},{"vendor":"siemens","product":"scalance_xc206-2_firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe__firmware"},{"vendor":"siemens","product":"scalance_xc206-2g_poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc206-2sfp_g_firmware"},{"vendor":"siemens","product":"scalance_xc208_firmware"},{"vendor":"siemens","product":"scalance_xc208eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc208g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc208g_firmware"},{"vendor":"siemens","product":"scalance_xc208g_poe_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc216-4c_g_firmware"},{"vendor":"siemens","product":"scalance_xc216_firmware"},{"vendor":"siemens","product":"scalance_xc216eec_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_\\(e\\/ip\\)_firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g__firmware"},{"vendor":"siemens","product":"scalance_xc224-4c_g_eec_firmware"},{"vendor":"siemens","product":"scalance_xc224__firmware"},{"vendor":"siemens","product":"scalance_xf-200ba_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_dna_firmware"},{"vendor":"siemens","product":"scalance_xf204-2ba_irt_firmware"},{"vendor":"siemens","product":"scalance_xm400_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_firmware"},{"vendor":"siemens","product":"scalance_xm408-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_firmware"},{"vendor":"siemens","product":"scalance_xm408-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_firmware"},{"vendor":"siemens","product":"scalance_xm416-4c_l3_firmware"},{"vendor":"siemens","product":"scalance_xp-200_firmware"},{"vendor":"siemens","product":"scalance_xp208_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp208_firmware"},{"vendor":"siemens","product":"scalance_xp208eec_firmware"},{"vendor":"siemens","product":"scalance_xp208poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xp216_\\(eip\\)_firmware"},{"vendor":"siemens","product":"scalance_xp216_firmware"},{"vendor":"siemens","product":"scalance_xp216eec_firmware"},{"vendor":"siemens","product":"scalance_xp216poe_eec_firmware"},{"vendor":"siemens","product":"scalance_xr-300_firmware"},{"vendor":"siemens","product":"scalance_xr-300eec_firmware"},{"vendor":"siemens","product":"scalance_xr-300poe_firmware"},{"vendor":"siemens","product":"scalance_xr-300wg_firmware"},{"vendor":"siemens","product":"scalance_xr324-12m_firmware"},{"vendor":"siemens","product":"scalance_xr324-12m_ts_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_eec_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_poe_firmware"},{"vendor":"siemens","product":"scalance_xr324-4m_poe_ts_firmware"},{"vendor":"siemens","product":"scalance_xr324wg_firmware"},{"vendor":"siemens","product":"scalance_xr326-2c_poe_wg_firmware"},{"vendor":"siemens","product":"scalance_xr328-4c_wg_firmware"},{"vendor":"siemens","product":"scalance_xr500_firmware"},{"vendor":"siemens","product":"scalance_xr524-8c_firmware"},{"vendor":"siemens","product":"scalance_xr524-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xr524_firmware"},{"vendor":"siemens","product":"scalance_xr526-8c_firmware"},{"vendor":"siemens","product":"scalance_xr526-8c_l3_firmware"},{"vendor":"siemens","product":"scalance_xr526_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_2hr2_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_2hr2_l3_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_firmware"},{"vendor":"siemens","product":"scalance_xr528-6m_l3_firmware"},{"vendor":"siemens","product":"scalance_xr528_firmware"},{"vendor":"siemens","product":"scalance_xr552-12_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_2hr2_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_2hr2_l3_firmware"},{"vendor":"siemens","product":"scalance_xr552-12m_firmware"},{"vendor":"siemens","product":"scalance_xr552_firmware"},{"vendor":"siemens","product":"siplus net scalance xc206-2"},{"vendor":"siemens","product":"siplus net scalance xc206-2sfp"},{"vendor":"siemens","product":"siplus net scalance xc208"},{"vendor":"siemens","product":"siplus net scalance xc216-4c"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-710008.pdf","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-710008.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36324"},{"url":"https://github.com/advisories/GHSA-hm3h-qvm3-r8qv"}],"sources":{"cve":[{"id":"CVE-2022-36324","description":"Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.","status":"published","published":"2022-08-10T11:18:39Z","modified":"2026-04-14T08:35:27.763Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39040","description":"Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.","status":"published","published":"2022-08-10T11:18:39Z","modified":"2026-04-14T08:35:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T19:24:27.052992Z"}],"ghsa":[{"id":"GHSA-hm3h-qvm3-r8qv","title":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE W-1700 IEEE...","description":"A vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE W-1700 IEEE 802.11ac family (All versions), SCALANCE W-700 IEEE 802.11ax family (All versions), SCALANCE W-700 IEEE 802.11n family (All versions), SCALANCE XB-200 switch family (All versions), SCALANCE XC-200 switch family (All versions), SCALANCE XF-200BA switch family (All versions), SCALANCE XM-400 Family (All versions), SCALANCE XP-200 switch family (All versions), SCALANCE XR-300WG switch family (All versions), SCALANCE XR-500 Family (All versions). Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.","status":"published","published":"2022-08-11T00:00:42Z","modified":"2026-04-14T09:31:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:07:28.42851Z"}],"nvd":[{"id":"CVE-2022-36324","description":"Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.","status":"published","published":"2022-08-10T12:15:12.93Z","modified":"2026-06-17T04:53:14.64Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}