CVE:CVE-2022-46144
CNNVD:CNNVD-202212-3088
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。
Siemens部分产品存在安全漏洞，该漏洞源于无法正确处理CLI命令。以下产品及版本受到影响：Scalance SC622-2C V2.3之前版本、Scalance SC622-2C 2.3版本至V3.0之前版本、Scalance SC626-2C V2.3之前版本、Scalance SC626-2C 2.3版本至V3.0之前版本、Scalance SC632-2C V2.3之前版本、Scalance SC632-2C 2.3版本至V3.0之前版本、Scalance SC636-2C V2.3之前版本、Scalance SC636-2C 2.3版本至V3.0之前版本、Scalance SC642-2C V2.3之前版本、Scalance SC642-2C 2.3版本至V3.0之前版本、Scalance SC646-2C V2.3之前版本、Scalance SC646-2C 2.3版本至V3.0之前版本。
solution:Upgrade siemens 6gk5622-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3); Upgrade siemens 6gk5626-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3); Upgrade siemens 6gk5632-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3); Upgrade siemens 6gk5636-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3); Upgrade siemens 6gk5642-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3); Upgrade siemens 6gk5646-2gs00-2ac2_firmware to a higher version than 3.0,2.3,and avoid the version [2.3,3.0),(,2.3)