CVE-2022-36324: Siemens Scalance M-800 Firmware

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected products

• Siemens Scalance M-800 Firmware: any version
• Siemens Scalance s615 Firmware: any version
• Siemens Scalance w700 Ieee 802.11ac Firmware: any version
• Siemens Scalance w700 Ieee 802.11ax Firmware: any version
• Siemens Scalance w700 Ieee 802.11n Firmware: any version
• Siemens Scalance Xb-200 Firmware: any version
• Siemens Scalance XB205-3 Firmware: any version
• Siemens Scalance XB205-3ld Firmware: any version
• Siemens Scalance XB208 Firmware: any version
• Siemens Scalance XB213-3 Firmware: any version
• Siemens Scalance XB213-3ld Firmware: any version
• Siemens Scalance XB216 Firmware: any version
• Siemens Scalance Xc-200 Firmware: any version
• Siemens Scalance XC206-2 Firmware: any version
• Siemens Scalance XC206-2g Poe Firmware: any version
• Siemens Scalance XC206-2g Poe Eec Firmware: any version
• Siemens Scalance XC206-2sfp Eec Firmware: any version
• Siemens Scalance XC206-2sfp G (e/ip) Firmware: any version
• Siemens Scalance XC206-2sfp G Eec Firmware: any version
• Siemens Scalance XC206-2sfp G Firmware: any version
• Siemens Scalance XC208 Firmware: any version
• Siemens Scalance XC208EEC Firmware: any version
• Siemens Scalance XC208G (e/ip) Firmware: any version
• Siemens Scalance XC208G Eec Firmware: any version
• Siemens Scalance XC208G Firmware: any version
• and 59 more

Published 2022-08-10. Last modified 2026-06-17.