CVE-2022-28328

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed Multicast LLC frames. This could allow an attacker to trigger a denial of service condition.

• CWE-20
• CWE-20

• https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdfPatch, Vendor Advisory

Published

Apr 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28319This vulnerability allows remote attackers to execute arbitr…7.8
• CVE-2022-2832A flaw was found in Blender 3.3.0. A null pointer dereferenc…7.5
• CVE-2022-28320This vulnerability allows remote attackers to execute arbitr…7.8
• CVE-2022-28321The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumblewe…9.8
• CVE-2022-28323An issue was discovered in MediaWiki through 1.37.2. The Sec…7.5
• CVE-2022-28327The generic P-256 feature in crypto/elliptic in Go before 1.…7.5
• CVE-2022-28329A vulnerability has been identified in SCALANCE W1788-1 M12 …6.5
• CVE-2022-2833Endless Infinite loop in Blender-thumnailing due to logical …7.5
• CVE-2022-28330Apache HTTP Server 2.4.53 and earlier on Windows may read be…5.3
• CVE-2022-28331On Windows, Apache Portable Runtime 1.7.0 and earlier may wr…9.8
• CVE-2022-28339Trend Micro HouseCall for Home Networks version 5.3.1302 and…7.8
• CVE-2022-2834The Helpful WordPress plugin before 4.5.26 puts the exported…5.3