CVE:CVE-2022-25756
CNNVD:CNNVD-202204-3137
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。
多款 Siemens 产品存在安全漏洞，攻击者可以利用该漏洞在受影响的设备上触发恶意请求。
solution:Upgrade siemens scalance_x302-7eec_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x304-2fe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x306-1ldfe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x307-2eec_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x307-3_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x307-3ld_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2ld_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2lh_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2lh+_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2m_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x308-2m_poe_firmware to a higher version than -; Upgrade siemens scalance_x308-2m_ts_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x310_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x310fe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x320-1fe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x320-1-2ldfe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_x408-2_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_xr324-4m_eec_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_xr324-4m_poe_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_xr324-4m_poe_ts_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_xr324-12m_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens scalance_xr324-12m_ts_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4); Upgrade siemens siplus_net_scalance_x308-2_firmware to a higher version than 4.1.4,and avoid the version (,4.1.4)