CVE-2022-46352

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). Specially crafted PROFINET DCP packets could cause a denial of service condition of affected products.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Dec 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-463539.8A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALA CVE-2022-463545.3A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALA CVE-2022-463557.5A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALA CVE-2022-463568.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and CVE-2022-463578.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and CVE-2022-463588.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and CVE-2022-463598.8Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and CVE-2022-46367.5Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to pat CVE-2022-463607.8Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the inform CVE-2022-463616.8An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a s CVE-2022-463637.5A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration CVE-2022-463649.8A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows