CVE-2022-36325: Siemens Scalance M-800 Firmware

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

Affected products

• Siemens Scalance M-800 Firmware: any version
• Siemens Scalance s615 Firmware: any version
• Siemens Scalance Sc-600 Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance SC622-2c Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance SC632-2c Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance SC636-2c Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance SC642-2c Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance SC646-2c Firmware: before 2.3.1 (fixed in 2.3.1)
• Siemens Scalance w700 Ieee 802.11ac Firmware: any version
• Siemens Scalance w700 Ieee 802.11ax Firmware: any version
• Siemens Scalance w700 Ieee 802.11n Firmware: any version
• Siemens Scalance Xb-200 Firmware: any version
• Siemens Scalance XB205-3 Firmware: any version
• Siemens Scalance XB205-3ld Firmware: any version
• Siemens Scalance XB208 Firmware: any version
• Siemens Scalance XB213-3 Firmware: any version
• Siemens Scalance XB213-3ld Firmware: any version
• Siemens Scalance XB216 Firmware: any version
• Siemens Scalance Xc-200 Firmware: any version
• Siemens Scalance XC206-2 Firmware: any version
• Siemens Scalance XC206-2g Poe Firmware: any version
• Siemens Scalance XC206-2g Poe Eec Firmware: any version
• Siemens Scalance XC206-2sfp Eec Firmware: any version
• Siemens Scalance XC206-2sfp G (e/ip) Firmware: any version
• Siemens Scalance XC206-2sfp G Eec Firmware: any version
• and 65 more

Published 2022-08-10. Last modified 2026-06-17.