Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

Se ha identificado una vulnerabilidad en:
SCALANCE XB205-3 (SC, PN) (V < 4.5),
SCALANCE XB205-3 (ST, E/IP) (V < 4.5),
SCALANCE XB205-3 (ST , E/IP) (V < 4.5),
SCALANCE XB205-3 (ST, PN) (V < 4.5),
SCALANCE XB205-3LD (SC, E/IP) (V < 4.5 ),
SCALANCE XB205-3LD (SC, PN) (V < 4.5),
SCALANCE XB208 (E/IP) (V < 4.5),
SCALANCE XB208 (PN) (V < 4.5),
SCALANCE XB213-3 (SC, E/IP) (V < 4.5),
SCALANCE XB213-3 (SC, PN) (V < 4.5),
SCALANCE XB213-3 (ST, E/IP) ( V < 4.5),
SCALANCE XB213-3 (ST, PN) (V < 4.5),
SCALANCE XB213-3LD (SC, E/IP) (V < 4.5),
SCALANCE XB213-3LD (SC, PN) (V < 4.5),
SCALANCE XB216 (E/IP) (V < 4.5),
SCALANCE XB216 (PN) (V < 4.5),
SCALANCE XC206-2 (SC ) (V < 4.5),
SCALANCE XC206-2 (ST/BFOC) (V < 4.5),
SCALANCE XC206-2G PoE (V < 4.5),
SCALANCE XC206-2G PoE (54 V DC) (V < 4.5), y
SCALANCE XC206-2G PoE EEC (54 V DC) (V < 4.5),
SCALANCE XC206-2SFP (V < 4.5),
SCALANCE XC206-2SFP EEC ( V < 4.5),
SCALANCE XC206-2SFP G (V < 4.5),
SCALANCE XC206-2SFP G (EIP DEF.) (V < 4.5),
SCALANCE XC206-2SFP G EEC (V < 4.5),
SCALANCE XC208 (V < 4.5),
SCALANCE XC208EEC (V < 4.5),
SCALANCE XC208G (V < 4.5),
SCALANCE XC208G (EIP def.) (V < 4.5),
SCALANCE XC208G EEC (V < 4.5),
SCALANCE XC208G PoE (V < 4.5),
SCALANCE XC208G PoE (54 V DC) (V < 4.5),
SCALANCE XC216 (todas versiones < V4.5),
SCALANCE XC216-3G PoE (V < 4.5),
SCALANCE XC216-3G PoE (54 V DC) (V < 4.5),
SCALANCE XC216-4C (V < 4. 5),
SCALANCE XC216-4C G (V < 4.5),
SCALANCE XC216-4C G (EIP Def.) (V < 4.5),
SCALANCE XC216-4C G EEC (V < 4.5) ,
SCALANCE XC216EEC (V < 4.5),
SCALANCE XC224 (V < 4.5),
SCALANCE XC224-4C G (V < 4.5),
SCALANCE XC224-4C G (EIP Def.) (V < 4.5),
SCALANCE XC224-4C G EEC (V < 4.5),
SCALANCE XF204 (V < 4.5),
SCALANCE XF204 DNA (V < 4.5),
SCALANCE XF204-2BA (Todas versiones < V4.5),
SCALANCE XF204-2BA DNA (V < 4.5),
SCALANCE XP208 (V < 4.5),
SCALANCE XP208 (Ethernet/IP) (V < 4.5),
SCALANCE XP208EEC (V < 4.5),
SCALANCE XP208PoE EEC (V < 4.5),
SCALANCE XP216 (V < 4.5),
SCALANCE XP216 (Ethernet/IP) (V < 4.5),
SCALANCE XP216EEC (V < 4.5),
SCALANCE XP216POE EEC (V < 4.5),
SCALANCE XR324WG (24 x FE, AC 230V) (V < 4.5),
SCALANCE XR324WG (24 X FE, DC 24V) (V < 4.5),
SCALANCE XR326-2C PoE WG (V < 4.5),
SCALANCE XR326-2C PoE WG (sin UL) (V < 4.5),
SCALANCE XR328-4C WG (24XFE , 4XGE, 24V) (V < 4.5),
SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (V < 4.5),
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (V < 4.5),
SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (V < 4.5),
SCALANCE XR328-4C WG (28xGE, AC 230V) (V < 4.5),
SCALANCE XR328- 4C WG (28xGE, DC 24V) (V < 4.5),
SIPLUS NET SCALANCE XC206-2 (V < 4.5),
SIPLUS NET SCALANCE XC206-2SFP (V < 4.5),
SIPLUS NET SCALANCE XC208 (V < 4.5),
SIPLUS NET SCALANCE XC216-4C (V < 4.5).
Los dispositivos afectados no sanitizan adecuadamente un campo de entrada. Esto podría permitir que un atacante remoto autenticado con privilegios administrativos inyecte código o genere un root shell del sistema. Seguimiento del CVE-2022-36323.