PT-2022-3573

CVE-2022-26335

·

Published

2022-04-12

·

Updated

2022-04-19

Description by

CVSS 2.0
8.3
High
MetricsAV:A/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 SCALANCE X304-2FE SCALANCE X306-1LD FE SCALANCE X307-2 SCALANCE X307-3 SCALANCE X307-3LD SCALANCE X308-2 SCALANCE X310 SCALANCE X320-1 SCALANCE X408-2 SCALANCE XR324-4M SCALANCE XR324-12M SIPLUS NET SCALANCE X308-2
Description The issue is related to the improper validation of the URI of incoming HTTP GET requests, which could allow an unauthenticated remote attacker to crash affected devices by sending specially crafted HTTP GET requests.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾