CVE:CVE-2022-46353
CNNVD:CNNVD-202212-3078
Siemens SCALANCE Series是德国西门子（Siemens）公司的一系列工业通信设备。
Siemens SCALANCE Series 存在安全漏洞。攻击者利用该漏洞对原始会话ID和HIJACK现有会话进行攻击。以下产品及版本受到影响：Scalance X204RNA（HSR） V3.2.7之前版本、Scalance X204RNA（PRP） V3.2.7之前版本、Scalance X204RNA EEC（HSR） V3.2.7之前版本、Scalance X204RNA EEC（PRP） V3.2.7之前版本、Scalance X204RNA EEC（PRP/HSR） V3.2.7之前版本。
solution:Upgrade siemens 6gk5204-0ba00-2mb2_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7); Upgrade siemens 6gk5204-0ba00-2kb2_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7); Upgrade siemens 6gk5204-0bs00-2na3_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7); Upgrade siemens 6gk5204-0bs00-3la3_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7); Upgrade siemens 6gk5204-0bs00-3pa3_firmware to a higher version than 3.2.7,and avoid the version (,3.2.7)