CVE:CVE-2022-26648
CNNVD:CNNVD-202207-942
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。
Siemens SCALANCE多款产品存在安全漏洞，该漏洞源于未正确验证传入 HTTP 请求的 GET 参数 XNo。以下产品及版本受到影响：SCALANCE X204IRT PRO所有版本、SCALANCE X206-1 V5.2.6之前版本、SCALANCE X206-1LD V5.2.6之前版本、SCALANCE X208 V5.2.6之前版本、SCALANCE X208PRO V5.2.6之前版本、SCALANCE X212-2 V5.2.6之前版本、SCALANCE X212-2LD V5.2.6之前版本、SCALANCE X216 V5.2.6之前版本、SCALANCE X224 V5.2.6之前版本、SCALANCE XF201-3P IRT所有版本、SCALANCE XF202-2P IRT所有版本、SCALANCE XF204 V5.2.6之前版本、SCALANCE XF204-2 V5.2.6之前版本、SCALANCE XF204 -2BA IRT所有版本、SCALANCE XF204IRT所有版本、SCALANCE XF204IRT所有版本、SCALANCE XF206-1 V5.2.6之前版本、SCALANCE XF208 V5.2.6之前版本。
solution:Upgrade siemens scalance_x204-2_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x204-2fm_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x204-2ld_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x204-2ld_ts_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x204-2ts_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x206-1_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x206-1ld_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x208_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x208_pro_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x212-2_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x212-2ld_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x216_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x224_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_xf204_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_xf204-2_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_xf206-1_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_xf208_firmware to a higher version than 5.2.6,and avoid the version (,5.2.6); Upgrade siemens scalance_x200-4p_irt_firmware to a higher version than *; Upgrade siemens scalance_x201-3p_irt_firmware to a higher version than *; Upgrade siemens scalance_x201-3p_irt_pro_firmware to a higher version than *; Upgrade siemens scalance_x202-2irt_firmware to a higher version than *; Upgrade siemens scalance_x202-2p_irt_firmware to a higher version than *; Upgrade siemens scalance_x202-2p_irt_pro_firmware to a higher version than *; Upgrade siemens scalance_x204irt_firmware to a higher version than *; Upgrade siemens scalance_x204irt_pro_firmware to a higher version than *; Upgrade siemens scalance_xf201-3p_irt_firmware to a higher version than *; Upgrade siemens scalance_xf202-2p_irt_firmware to a higher version than *; Upgrade siemens scalance_xf204-2ba_irt_firmware to a higher version than *; Upgrade siemens scalance_xf204irt_firmware to a higher version than *