CVE-2022-26334: Siemens Scalance x302-7eec Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices do not properly validate the GET parameter XNo of incoming HTTP requests. This could allow an unauthenticated remote attacker to crash affected devices.

Affected products

Siemens Scalance x302-7eec Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x304-2fe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x306-1ldfe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x307-2eec Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x307-3 Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x307-3ld Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2 Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2ld Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2lh+ Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2lh Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2m Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x308-2m Poe Firmware: affected versions not specified
Siemens Scalance x308-2m Ts Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x310 Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x310fe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x320-1-2ldfe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x320-1fe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance x408-2 Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance XR324-12m Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance XR324-12m Ts Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance XR324-4m Eec Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance XR324-4m Poe Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Scalance XR324-4m Poe Ts Firmware: before 4.1.4 (fixed in 4.1.4)
Siemens Siplus Net Scalance x308-2 Firmware: before 4.1.4 (fixed in 4.1.4)

Published 2022-04-12. Last modified 2026-06-17.