Siemens SCALANCE and RUGGEDCOM Products (Update A)
Affected devices do not properly authorize the change password function of the web interface.
This could allow low privileged users to escalate their privileges. CVE-2022-31765 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).