CVE-2022-28328: Siemens Scalance w1788-1 m12 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed Multicast LLC frames. This could allow an attacker to trigger a denial of service condition.

Affected products

• Siemens Scalance w1788-1 m12 Firmware: before 3.0.0 (fixed in 3.0.0)
• Siemens Scalance w1788-2 Eec m12 Firmware: before 3.0.0 (fixed in 3.0.0)
• Siemens Scalance w1788-2 m12 Firmware: before 3.0.0 (fixed in 3.0.0)
• Siemens Scalance w1788-2ia m12 Firmware: before 3.0.0 (fixed in 3.0.0)

Published 2022-04-12. Last modified 2026-06-17.