CVE-2022-34821

Published: Jul 12, 2022Modified: Jan 14, 2025

8.8

Vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), SCALANCE M874-2 (6GK5874-2AA00-2AA2), SCALANCE M874-3 (6GK5874-3AA00-2AA2), SCALANCE M876-3 (6GK5876-3AA02-2BA2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2), SCALANCE M876-4 (6GK5876-4AA10-2BA2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0), SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.

Affected (15)

Products: Siemens: Simatic Cp 1242 7 V2 Firmware, Simatic Cp 1243 1 Firmware, Simatic Cp 1243 7 Lte Eu Firmware, Simatic Cp 1243 7 Lte Us Firmware, Simatic Cp 1243 8 Irc Firmware, Simatic Cp 1542sp 1 Irc Firmware, Simatic Cp 1543 1 Firmware, Simatic Cp 1543sp 1 Firmware, Siplus Et 200sp Cp 1542sp 1 Irc Tx Rail Firmware, Siplus Et 200sp Cp 1543sp 1 Isec Firmware, Siplus Et 200sp Cp 1543sp 1 Isec Tx Rail Firmware, Siplus Net Cp 1242 7 V2 Firmware, Siplus Net Cp 1543 1 Firmware, Siplus S7 1200 Cp 1243 1 Firmware, Siplus S7 1200 Cp 1243 1 Rail Firmware

Siemens

15 products

Simatic Cp 1242 7 V2 Firmware

Simatic Cp 1243 1 Firmware

Simatic Cp 1243 7 Lte Eu Firmware

Simatic Cp 1243 7 Lte Us Firmware

Simatic Cp 1243 8 Irc Firmware

Simatic Cp 1542sp 1 Irc Firmware

Simatic Cp 1543 1 Firmware

Simatic Cp 1543sp 1 Firmware

Siplus Et 200sp Cp 1542sp 1 Irc Tx Rail Firmware

Siplus Et 200sp Cp 1543sp 1 Isec Firmware

Siplus Et 200sp Cp 1543sp 1 Isec Tx Rail Firmware

Siplus Net Cp 1242 7 V2 Firmware

Siplus Net Cp 1543 1 Firmware

Siplus S7 1200 Cp 1243 1 Firmware

Siplus S7 1200 Cp 1243 1 Rail Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1242 7 V2 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Cp 1242 7 V2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1243 1 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Cp 1243 1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1243 7 Lte Eu Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Cp 1243 7 Lte Eu	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1243 7 Lte Us Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Cp 1243 7 Lte Us	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1243 8 Irc Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Cp 1243 8 Irc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1542sp 1 Irc Firmware	From 2.0

Running on/with	Platform Versions
Siemens Simatic Cp 1542sp 1 Irc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1543 1 Firmware	Before 3.0.22

Running on/with	Platform Versions
Siemens Simatic Cp 1543 1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cp 1543sp 1 Firmware	From 2.0

Running on/with	Platform Versions
Siemens Simatic Cp 1543sp 1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Et 200sp Cp 1542sp 1 Irc Tx Rail Firmware	From 2.0

Running on/with	Platform Versions
Siemens Siplus Et 200sp Cp 1542sp 1 Irc Tx Rail	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Et 200sp Cp 1543sp 1 Isec Firmware	From 2.0

Running on/with	Platform Versions
Siemens Siplus Et 200sp Cp 1543sp 1 Isec	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Et 200sp Cp 1543sp 1 Isec Tx Rail Firmware	From 2.0

Running on/with	Platform Versions
Siemens Siplus Et 200sp Cp 1543sp 1 Isec Tx Rail	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Net Cp 1242 7 V2 Firmware	All versions

Running on/with	Platform Versions
Siemens Siplus Net Cp 1242 7 V2	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus Net Cp 1543 1 Firmware	Before 3.0.22

Running on/with	Platform Versions
Siemens Siplus Net Cp 1543 1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus S7 1200 Cp 1243 1 Firmware	All versions

Running on/with	Platform Versions
Siemens Siplus S7 1200 Cp 1243 1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus S7 1200 Cp 1243 1 Rail Firmware	All versions

Running on/with	Platform Versions
Siemens Siplus S7 1200 Cp 1243 1 Rail	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (6)

https://cert-portal.siemens.com/productcert/html/ssa-413565.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-517377.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.