CVE-2022-36324

HIGH
7.5
CVSS Score
Published: August 10, 2022 at 11:18 AM UTC
Updated: June 17, 2026 at 04:53 AM UTC
229 products affected across 1 vendorScalance S615 FirmwareScalance Xf204-2ba Irt FirmwareScalance Xr324-4m POE Firmware

Using RUGGEDCOM RM1224 LTE(4G) EU by Siemens?

Get instant alerts when new vulnerabilities affect RUGGEDCOM RM1224 LTE(4G) EU - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 2%
SSVC
No known exploit

Description

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions
siemens-scalance-m-800 (same device)
All versions
siemens-scalance-w700-ieee-802-11ac (same device)
All versions
siemens-scalance-w700-ieee-802-11ax (same device)
All versions
siemens-scalance-w700-ieee-802-11n (same device)
All versions
siemens-scalance-xb-200 (same device)
All versions
siemens-scalance-xb205-3 (same device)
All versions
siemens-scalance-xb205-3ld (same device)
All versions
siemens-scalance-xb208 (same device)
All versions
siemens-scalance-xb213-3 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-770

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card