CVE-2022-34821

Summary

CVE	CVE-2022-34821
State	PUBLISHED
Assigner	siemens
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-07-12 10:15:12 UTC
Updated	2026-09-03 01:15:22 UTC
Description	A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), SCALANCE M874-2 (6GK5874-2AA00-2AA2), SCALANCE M874-3 (6GK5874-3AA00-2AA2), SCALANCE M876-3 (6GK5876-3AA02-2BA2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2), SCALANCE M876-4 (6GK5876-4AA10-2BA2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0), SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.

Risk And Classification

Primary CVSS: v4.0 8.8 HIGH from [email protected]

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS: 0.023580000 probability, percentile 0.826410000 (date 2026-09-06)

Problem Types: CWE-94 | CWE-94 CWE-94: Improper Control of Generation of Code ('Code Injection')

Version	Source	Type	Score	Severity	Vector
4.0	[email protected]	Secondary	8.8	HIGH	`CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/C...`
4.0	CNA	DECLARED	8.8	HIGH	`CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H`
3.1	[email protected]	Secondary	9.8	CRITICAL	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
3.1	[email protected]	Secondary	7.6	HIGH	`CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H`
3.1	CNA	DECLARED	7.6	HIGH	`CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H`
2.0	[email protected]	Primary	9.3		`AV:N/AC:M/Au:N/C:C/I:C/A:C`

CVSS v4.0 Breakdown

Attack Vector

Adjacent

Attack Complexity

Low

Attack Requirements

Present

Privileges Required

High

User Interaction

None

Confidentiality

High

Integrity

High

Availability

High

Sub Conf.

High

Sub Integrity

High

Sub Availability

High

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:M/Au:N/C:C/I:C/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Siemens	Simatic Cp 1242-7 V2	-	All	All	All
Operating System	Siemens	Simatic Cp 1242-7 V2 Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1243-1	-	All	All	All
Operating System	Siemens	Simatic Cp 1243-1 Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1243-7 Lte Eu	-	All	All	All
Operating System	Siemens	Simatic Cp 1243-7 Lte Eu Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1243-7 Lte Us	-	All	All	All
Operating System	Siemens	Simatic Cp 1243-7 Lte Us Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1243-8 Irc	-	All	All	All
Operating System	Siemens	Simatic Cp 1243-8 Irc Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1542sp-1 Irc	-	All	All	All
Operating System	Siemens	Simatic Cp 1542sp-1 Irc Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1543-1	-	All	All	All
Operating System	Siemens	Simatic Cp 1543-1 Firmware	All	All	All	All
Hardware	Siemens	Simatic Cp 1543sp-1	-	All	All	All
Operating System	Siemens	Simatic Cp 1543sp-1 Firmware	All	All	All	All
Hardware	Siemens	Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail	-	All	All	All
Operating System	Siemens	Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail Firmware	All	All	All	All
Hardware	Siemens	Siplus Et 200sp Cp 1543sp-1 Isec	-	All	All	All
Operating System	Siemens	Siplus Et 200sp Cp 1543sp-1 Isec Firmware	All	All	All	All
Hardware	Siemens	Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail	-	All	All	All
Operating System	Siemens	Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail Firmware	All	All	All	All
Hardware	Siemens	Siplus Net Cp 1242-7 V2	-	All	All	All
Operating System	Siemens	Siplus Net Cp 1242-7 V2 Firmware	All	All	All	All
Hardware	Siemens	Siplus Net Cp 1543-1	-	All	All	All
Operating System	Siemens	Siplus Net Cp 1543-1 Firmware	All	All	All	All
Hardware	Siemens	Siplus S7-1200 Cp 1243-1	-	All	All	All
Operating System	Siemens	Siplus S7-1200 Cp 1243-1 Firmware	All	All	All	All
Hardware	Siemens	Siplus S7-1200 Cp 1243-1 Rail	-	All	All	All
Operating System	Siemens	Siplus S7-1200 Cp 1243-1 Rail Firmware	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Siemens	RUGGEDCOM RM1224 LTE4G EU	affected V7.2 custom	Not specified
CNA	Siemens	RUGGEDCOM RM1224 LTE4G NAM	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M804PB	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M812-1 ADSL-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M812-1 ADSL-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M816-1 ADSL-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M816-1 ADSL-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M826-2 SHDSL-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M874-2	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M874-3	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M876-3	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M876-3 ROK	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M876-4	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M876-4 EU	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE M876-4 NAM	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE MUM853-1 EU	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE MUM856-1 EU	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE MUM856-1 RoW	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE S615 EEC LAN-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE S615 LAN-Router	affected V7.2 custom	Not specified
CNA	Siemens	SCALANCE SC622-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC622-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE SC626-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC626-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE SC632-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC632-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE SC636-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC636-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE SC642-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC642-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE SC646-2C	affected V2.3 custom	Not specified
CNA	Siemens	SCALANCE SC646-2C	affected V2.3 V3.0 custom	Not specified
CNA	Siemens	SCALANCE WAB762-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM763-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM763-1 ME	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM763-1 US	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1 ME	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1 US	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1 EEC	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1 EEC ME	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WAM766-1 EEC US	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUB762-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUB762-1 IFeatures	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM763-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM763-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM763-1 US	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM763-1 US	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM766-1	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM766-1 ME	affected V3.0.0 custom	Not specified
CNA	Siemens	SCALANCE WUM766-1 USA	affected V3.0.0 custom	Not specified
CNA	Siemens	SIMATIC CP 1242-7 V2	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIMATIC CP 1243-1	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIMATIC CP 1243-7 LTE EU	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIMATIC CP 1243-7 LTE US	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIMATIC CP 1243-8 IRC	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIMATIC CP 1542SP-1 IRC	affected V2.0 V2.2.28 custom	Not specified
CNA	Siemens	SIMATIC CP 1543-1	affected All versions < V3.0.22	Not specified
CNA	Siemens	SIMATIC CP 1543SP-1	affected V2.0 V2.2.28 custom	Not specified
CNA	Siemens	SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL	affected V2.0 V2.2.28 custom	Not specified
CNA	Siemens	SIPLUS ET 200SP CP 1543SP-1 ISEC	affected V2.0 V2.2.28 custom	Not specified
CNA	Siemens	SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL	affected V2.0 V2.2.28 custom	Not specified
CNA	Siemens	SIPLUS NET CP 1242-7 V2	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIPLUS NET CP 1543-1	affected All versions < V3.0.22	Not specified
CNA	Siemens	SIPLUS S7-1200 CP 1243-1	affected All versions < V3.3.46	Not specified
CNA	Siemens	SIPLUS S7-1200 CP 1243-1 RAIL	affected All versions < V3.3.46	Not specified

References

Reference	Source	Link	Tags
cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf	af854a3a-2127-422b-91ae-364da2661108	cert-portal.siemens.com
cert-portal.siemens.com/productcert/html/ssa-413565.html	[email protected]	cert-portal.siemens.com
cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf	af854a3a-2127-422b-91ae-364da2661108	cert-portal.siemens.com	Patch, Vendor Advisory
cert-portal.siemens.com/productcert/html/ssa-517377.html	[email protected]	cert-portal.siemens.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

591081 Siemens SIMATIC CP Devices Multiple Vulnerabilities (SSA-517377) (ICSA-22-195-12)