CVE:CVE-2022-36325
CNNVD:CNNVD-202208-2711
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。
Siemens SCALANCE系列产品存在安全漏洞，该漏洞源于设备显示web界面时无法正确地清除用户引入的数据导致经过身份验证且具有管理权限的远程攻击者注入代码实现DOM型跨站脚本。以下产品和版本受到影响：SCALANCE M-800 / S615全部版本、SCALANCE SC-600 family V2.3.1之前的版本、SCALANCE W-1700 IEEE 802.11ac family全部版本、SCALANCE W-700 IEEE 802.11ax family全部版本、SCALANCE W-700 IEEE 802.11n family全部版本、SCALANCE XB-200 switch family全部版本、SCALANCE XC-200 switch family全部版本、SCALANCE XF-200BA switch family全部版本、SCALANCE XM-400 Family全部版本、SCALANCE XP-200 switch family全部版本、SCALANCE XR-300WG switch family全部版本、SCALANCE XR-500 Family全部版本。
solution:Upgrade siemens scalance_m-800_firmware to a higher version than *; Upgrade siemens scalance_s615_firmware to a higher version than *; Upgrade siemens scalance_sc-600_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_sc622-2c_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_sc632-2c_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_sc636-2c_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_sc642-2c_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_sc646-2c_firmware to a higher version than 2.3.1,and avoid the version (,2.3.1); Upgrade siemens scalance_w700_ieee_802.11ax_firmware to a higher version than *; Upgrade siemens scalance_w700_ieee_802.11n_firmware to a higher version than *; Upgrade siemens scalance_w700_ieee_802.11ac_firmware to a higher version than *; Upgrade siemens scalance_xb-200_firmware to a higher version than *; Upgrade siemens scalance_xb205-3_firmware to a higher version than *; Upgrade siemens scalance_xb205-3ld_firmware to a higher version than *; Upgrade siemens scalance_xb208_firmware to a higher version than *; Upgrade siemens scalance_xb213-3_firmware to a higher version than *; Upgrade siemens scalance_xb213-3ld_firmware to a higher version than *; Upgrade siemens scalance_xb216_firmware to a higher version than *; Upgrade siemens scalance_xc-200_firmware to a higher version than *; Upgrade siemens scalance_xc206-2_firmware to a higher version than *; Upgrade siemens scalance_xc206-2g_poe__firmware to a higher version than *; Upgrade siemens scalance_xc206-2g_poe_eec_firmware to a higher version than *; Upgrade siemens scalance_xc206-2sfp_eec_firmware to a higher version than *; Upgrade siemens scalance_xc206-2sfp_g_firmware to a higher version than *; Upgrade siemens scalance_xc206-2sfp_g_(e/ip)_firmware to a higher version than *; Upgrade siemens scalance_xc206-2sfp_g_eec_firmware to a higher version than *; Upgrade siemens scalance_xc208_firmware to a higher version than *; Upgrade siemens scalance_xc208eec_firmware to a higher version than *; Upgrade siemens scalance_xc208g_firmware to a higher version than *; Upgrade siemens scalance_xc208g_(e/ip)_firmware to a higher version than *; Upgrade siemens scalance_xc208g_eec_firmware to a higher version than *; Upgrade siemens scalance_xc208g_poe_firmware to a higher version than *; Upgrade siemens scalance_xc216_firmware to a higher version than *; Upgrade siemens scalance_xc216-4c_firmware to a higher version than *; Upgrade siemens scalance_xc216-4c_g_firmware to a higher version than *; Upgrade siemens scalance_xc216-4c_g_(e/ip)_firmware to a higher version than *; Upgrade siemens scalance_xc216-4c_g_eec_firmware to a higher version than *; Upgrade siemens scalance_xc216eec_firmware to a higher version than *; Upgrade siemens scalance_xc224__firmware to a higher version than *; Upgrade siemens scalance_xc224-4c_g__firmware to a higher version than *; Upgrade siemens scalance_xc224-4c_g_(e/ip)_firmware to a higher version than *; Upgrade siemens scalance_xc224-4c_g_eec_firmware to a higher version than *; Upgrade siemens scalance_xf-200ba_firmware to a higher version than *; Upgrade siemens scalance_xf204-2ba_dna_firmware to a higher version than *; Upgrade siemens scalance_xf204-2ba_irt_firmware to a higher version than *; Upgrade siemens scalance_xm400_firmware to a higher version than *; Upgrade siemens scalance_xm408-4c_firmware to a higher version than *; Upgrade siemens scalance_xm408-4c_l3_firmware to a higher version than *; Upgrade siemens scalance_xm408-8c_firmware to a higher version than *; Upgrade siemens scalance_xm408-8c_l3_firmware to a higher version than *; Upgrade siemens scalance_xm416-4c_firmware to a higher version than *; Upgrade siemens scalance_xm416-4c_l3_firmware to a higher version than *; Upgrade siemens scalance_xp-200_firmware to a higher version than *; Upgrade siemens scalance_xp208_firmware to a higher version than *; Upgrade siemens scalance_xp208_(eip)_firmware to a higher version than *; Upgrade siemens scalance_xp208eec_firmware to a higher version than *; Upgrade siemens scalance_xp208poe_eec_firmware to a higher version than *; Upgrade siemens scalance_xp216_firmware to a higher version than *; Upgrade siemens scalance_xp216_(eip)_firmware to a higher version than *; Upgrade siemens scalance_xp216eec_firmware to a higher version than *; Upgrade siemens scalance_xp216poe_eec_firmware to a higher version than *; Upgrade siemens scalance_xr-300_firmware to a higher version than *; Upgrade siemens scalance_xr-300eec_firmware to a higher version than *; Upgrade siemens scalance_xr-300poe_firmware to a higher version than *; Upgrade siemens scalance_xr-300wg_firmware to a higher version than *; Upgrade siemens scalance_xr324-12m_firmware to a higher version than *; Upgrade siemens scalance_xr324-12m_ts_firmware to a higher version than *; Upgrade siemens scalance_xr324-4m_eec_firmware to a higher version than *; Upgrade siemens scalance_xr324-4m_poe_firmware to a higher version than *; Upgrade siemens scalance_xr324-4m_poe_ts_firmware to a higher version than *; Upgrade siemens scalance_xr324wg_firmware to a higher version than *; Upgrade siemens scalance_xr326-2c_poe_wg_firmware to a higher version than *; Upgrade siemens scalance_xr328-4c_wg_firmware to a higher version than *; Upgrade siemens scalance_xr500_firmware to a higher version than *; Upgrade siemens scalance_xr524_firmware to a higher version than *; Upgrade siemens scalance_xr524-8c_firmware to a higher version than *; Upgrade siemens scalance_xr524-8c_l3_firmware to a higher version than *; Upgrade siemens scalance_xr526_firmware to a higher version than *; Upgrade siemens scalance_xr526-8c_firmware to a higher version than *; Upgrade siemens scalance_xr526-8c_l3_firmware to a higher version than *; Upgrade siemens scalance_xr528_firmware to a higher version than *; Upgrade siemens scalance_xr528-6m_firmware to a higher version than *; Upgrade siemens scalance_xr528-6m_2hr2_firmware to a higher version than *; Upgrade siemens scalance_xr528-6m_2hr2_l3_firmware to a higher version than *; Upgrade siemens scalance_xr528-6m_l3_firmware to a higher version than *; Upgrade siemens scalance_xr552_firmware to a higher version than *; Upgrade siemens scalance_xr552-12_firmware to a higher version than *; Upgrade siemens scalance_xr552-12m_firmware to a higher version than *; Upgrade siemens scalance_xr552-12m_2hr2_firmware to a higher version than *; Upgrade siemens scalance_xr552-12m_2hr2_l3_firmware to a higher version than *