CVE-2022-46353

CVE-2022-46353 is a critical vulnerability affecting Siemens SCALANCE X204RNA series devices (all versions prior to V3.2.7). The flaw lies in the insecure generation of session IDs and nonces by the device's web server. This allows an unauthenticated remote attacker to brute-force session IDs and hijack existing user sessions. The vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.