CVE:CVE-2022-40631
CNNVD:CNNVD-202210-504
Siemens Scalance X-200是德国西门子（Siemens）公司的一款工业级以太网交换机。
SCALANCE Switches存在跨站脚本漏洞，该漏洞源于存在跨站脚本漏洞，如果被攻击者利用可能会导致会话劫持。以下产品和版本受到影响：SCALANCE X200-4P IRT V5.5.0之前版本、SCALANCE X204-2 V5 .2.5之前版本、SCALANCE X206-1 V5.2.5之前版本、SCALANCE X208 V5.2.5之前版本、SCALANCE X212-2 V5.2.5之前版本、SCALANCE X216 V5.2.5之前版本等。
solution:Upgrade siemens scalance_x200-4p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x201-3p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x201-3p_irt_pro_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x202-2irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x202-2p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x202-2p_irt_pro_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x204-2_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x204-2fm_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x204-2ld_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x204-2ld_ts_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x204-2ts_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x204irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x204irt_pro_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_x206-1_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x206-1ld_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x208_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x208pro_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x212-2_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x212-2ld_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x216_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_x224_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_xf201-3p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_xf202-2p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_xf204_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_xf204-2_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_xf204-2ba_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_xf204irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0); Upgrade siemens scalance_xf206-1_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens scalance_xf208_firmware to a higher version than 5.2.5,and avoid the version (,5.2.5); Upgrade siemens siplus_net_scalance_x202-2p_irt_firmware to a higher version than 5.5.0,and avoid the version (,5.5.0)