Siemens 6gk5632-2gs00-2ac2 Firmware vulnerabilities

2 CVEs affecting Siemens 6gk5632-2gs00-2ac2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-46144, published 2022-12-13.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-31765, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
• CVE-2022-46144, published 2022-12-13. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C…