CVE-2022-46350

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. This can be used by an attacker to trigger a malicious request on the affected device.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80CWE-79

Affected software

VendorProductVersions
SiemensSCALANCE X204RNA (HSR)All versions < V3.2.7
SiemensSCALANCE X204RNA (PRP)All versions < V3.2.7
SiemensSCALANCE X204RNA EEC (HSR)All versions < V3.2.7
SiemensSCALANCE X204RNA EEC (PRP)All versions < V3.2.7
SiemensSCALANCE X204RNA EEC (PRP/HSR)All versions < V3.2.7

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-463515.5A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALACVE-2022-463527.5A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALACVE-2022-463539.8A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALACVE-2022-463545.3A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALACVE-2022-463557.5A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALACVE-2022-463568.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, andCVE-2022-463578.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, andCVE-2022-463588.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, andCVE-2022-463598.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, andCVE-2022-46367.5Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to patCVE-2022-463607.8Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the informCVE-2022-463616.8An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a s
CVE-2022-46350: Medium severity, CVSS 6.1 | Vulnix