CVE-2022-46144
Quick assessment
Affected
Siemens SCALANCE SC622-2C
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Siemens SCALANCE Series是德国西门子（Siemens）公司的一系列工业通信设备。 Siemens部分产品存在安全漏洞，该漏洞源于无法正确处理CLI命令。以下产品及版本受到影响：Scalance SC622-2C V2.3之前版本、Scalance SC622-2C 2.3版本至V3.0之前版本、Scalance SC626-2C V2.3之前版本、Scalance SC626-2C 2.3版本至V3.0之前版本、Scalance SC632-2C V2.3之前版本、Scalance
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-46144
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V2.3), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V2.3), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V2.3), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V2.3), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V2.3), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V2.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V2.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V2.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V2.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V2.0.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在生命周期中对资源的控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens SCALANCE Series 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SCALANCE Series是德国西门子（Siemens）公司的一系列工业通信设备。 Siemens部分产品存在安全漏洞，该漏洞源于无法正确处理CLI命令。以下产品及版本受到影响：Scalance SC622-2C V2.3之前版本、Scalance SC622-2C 2.3版本至V3.0之前版本、Scalance SC626-2C V2.3之前版本、Scalance SC626-2C 2.3版本至V3.0之前版本、Scalance SC632-2C V2.3之前版本、Scalance
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | SCALANCE SC622-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC622-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE SC626-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC626-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE SC632-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC632-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE SC636-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC636-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE SC642-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC642-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE SC646-2C | 0 ~ V2.3 | - |
|
| Siemens | SCALANCE SC646-2C | V2.3 ~ V3.0 | - |
|
| Siemens | SCALANCE WAM763-1 | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WAM766-1 | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WAM766-1 (US) | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WAM766-1 EEC | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WAM766-1 EEC (US) | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WUM763-1 | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WUM763-1 | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WUM766-1 | 0 ~ V2.0.0 | - |
|
| Siemens | SCALANCE WUM766-1 (USA) | 0 ~ V2.0.0 | - |
|
II. Public POCs for CVE-2022-46144
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-46144
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-46144 (3)
Same Patch Batch · Siemens · 2022-12-13 · 42 CVEs total
| CVE-2022-45937 | 8.8 HIGH | 部分Siemens产品 安全漏洞 |
| CVE-2022-46664 | 8.1 HIGH | Mendix Workflow Commons 访问控制错误漏洞 |
| CVE-2022-41284 | 7.8 HIGH | Siemens部分产品 缓冲区错误漏洞 |
| CVE-2022-43517 | 7.8 HIGH | Siemens Simcenter STAR-CCM+ 安全漏洞 |
| CVE-2022-46345 | 7.8 HIGH | Siemens Parasolid 缓冲区错误漏洞 |
| CVE-2022-41286 | 7.8 HIGH | Siemens部分产品 缓冲区错误漏洞 |
| CVE-2022-41285 | 7.8 HIGH | Siemens部分产品 资源管理错误漏洞 |
| CVE-2022-41283 | 7.8 HIGH | Siemens部分产品 缓冲区错误漏洞 |
| CVE-2022-41282 | 7.8 HIGH | Siemens部分产品 缓冲区错误漏洞 |
| CVE-2022-41281 | 7.8 HIGH | Siemens部分产品 缓冲区错误漏洞 |
| CVE-2022-46346 | 7.8 HIGH | Siemens Parasolid 缓冲区错误漏洞 |
| CVE-2022-46347 | 7.8 HIGH | Siemens Parasolid 缓冲区错误漏洞 |
| CVE-2022-46348 | 7.8 HIGH | Siemens Parasolid 缓冲区错误漏洞 |
| CVE-2022-46349 | 7.8 HIGH | Siemens Parasolid 缓冲区错误漏洞 |
| CVE-2021-40365 | 7.5 HIGH | Siemens SIMATIC Drive Controller 输入验证错误漏洞 |
| CVE-2022-46140 | 6.5 MEDIUM | Siemens部分产品 加密问题漏洞 |
| CVE-2022-46142 | 5.7 MEDIUM | Siemens部分产品 安全漏洞 |
| CVE-2021-44694 | 5.5 MEDIUM | Siemens SIMATIC Drive Controller 输入验证错误漏洞 |
| CVE-2022-44731 | 5.4 MEDIUM | Siemens部分产品 参数注入漏洞 |
| CVE-2022-46265 | 5.4 MEDIUM | Siemens Polarion 注入漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-664
-
CVE-2026-20336
Cisco Secure Adaptive Security Appliance Software, Secure Fi -
CVE-2026-54251
netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direc -
CVE-2026-20353
Cisco Secure Email Gateway Security Hardening Release -
CVE-2026-86203
PocketMine-MP before 5.39.2 Item Duplication via Despawn Sta -
CVE-2026-20274
Cisco IOS XR Software Security Hardening Release: September
V. Comments for CVE-2022-46144
No comments yet