CVE-2024-37991

Published: Sep 10, 2024Modified: Sep 18, 2024

6.0

Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF610R FCC (6GT2811-6BC10-1AA0) (All versions < V4.2), SIMATIC Reader RF615R CMIIT (6GT2811-6CC10-2AA0) (All versions < V4.2), SIMATIC Reader RF615R ETSI (6GT2811-6CC10-0AA0) (All versions < V4.2), SIMATIC Reader RF615R FCC (6GT2811-6CC10-1AA0) (All versions < V4.2), SIMATIC Reader RF650R ARIB (6GT2811-6AB20-4AA0) (All versions < V4.2), SIMATIC Reader RF650R CMIIT (6GT2811-6AB20-2AA0) (All versions < V4.2), SIMATIC Reader RF650R ETSI (6GT2811-6AB20-0AA0) (All versions < V4.2), SIMATIC Reader RF650R FCC (6GT2811-6AB20-1AA0) (All versions < V4.2), SIMATIC Reader RF680R ARIB (6GT2811-6AA10-4AA0) (All versions < V4.2), SIMATIC Reader RF680R CMIIT (6GT2811-6AA10-2AA0) (All versions < V4.2), SIMATIC Reader RF680R ETSI (6GT2811-6AA10-0AA0) (All versions < V4.2), SIMATIC Reader RF680R FCC (6GT2811-6AA10-1AA0) (All versions < V4.2), SIMATIC Reader RF685R ARIB (6GT2811-6CA10-4AA0) (All versions < V4.2), SIMATIC Reader RF685R CMIIT (6GT2811-6CA10-2AA0) (All versions < V4.2), SIMATIC Reader RF685R ETSI (6GT2811-6CA10-0AA0) (All versions < V4.2), SIMATIC Reader RF685R FCC (6GT2811-6CA10-1AA0) (All versions < V4.2), SIMATIC RF1140R (6GT2831-6CB00) (All versions < V1.1), SIMATIC RF1170R (6GT2831-6BB00) (All versions < V1.1), SIMATIC RF166C (6GT2002-0EE20) (All versions < V2.2), SIMATIC RF185C (6GT2002-0JE10) (All versions < V2.2), SIMATIC RF186C (6GT2002-0JE20) (All versions < V2.2), SIMATIC RF186CI (6GT2002-0JE50) (All versions < V2.2), SIMATIC RF188C (6GT2002-0JE40) (All versions < V2.2), SIMATIC RF188CI (6GT2002-0JE60) (All versions < V2.2), SIMATIC RF360R (6GT2801-5BA30) (All versions < V2.2). The service log files of the affected application can be accessed without proper authentication. This could allow an unauthenticated attacker to get access to sensitive information.

Affected (27)

Siemens

27 products

Simatic Rf360r Firmware

Simatic Rf1170r Firmware

Simatic Rf1140r Firmware

Simatic Reader Rf685r Fcc Firmware

Simatic Reader Rf685r Etsi Firmware

Simatic Reader Rf685r Cmiit Firmware

Simatic Reader Rf685r Arib Firmware

Simatic Reader Rf680r Fcc Firmware

Simatic Reader Rf680r Etsi Firmware

Simatic Reader Rf680r Cmiit Firmware

Simatic Reader Rf680r Arib Firmware

Simatic Reader Rf650r Fcc Firmware

Simatic Reader Rf650r Etsi Firmware

Simatic Reader Rf650r Cmiit Firmware

Simatic Reader Rf650r Arib Firmware

Simatic Reader Rf615r Fcc Firmware

Simatic Reader Rf615r Etsi Firmware

Simatic Reader Rf615r Cmiit Firmware

Simatic Reader Rf610r Fcc Firmware

Simatic Reader Rf610r Etsi Firmware

Simatic Reader Rf610r Cmiit Firmware

Simatic Rf188ci Firmware

Simatic Rf188c Firmware

Simatic Rf186ci Firmware

Simatic Rf186c Firmware

Simatic Rf185c Firmware

Simatic Rf166c Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf360r Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf360r	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf1170r Firmware	Before 1.1

Running on/with	Platform Versions
Siemens Simatic Rf1170r	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf1140r Firmware	Before 1.1

Running on/with	Platform Versions
Siemens Simatic Rf1140r	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Fcc Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Fcc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Etsi Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Etsi	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Cmiit Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Cmiit	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf685r Arib Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf685r Arib	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Fcc Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Fcc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Etsi Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Etsi	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Cmiit Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Cmiit	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf680r Arib Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf680r Arib	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Fcc Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Fcc	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Etsi Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Etsi	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Cmiit Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Cmiit	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf650r Arib Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf650r Arib	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Fcc Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Fcc	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Etsi Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Etsi	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf615r Cmiit Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf615r Cmiit	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Fcc Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Fcc	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Etsi Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Etsi	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Reader Rf610r Cmiit Firmware	Before 4.2

Running on/with	Platform Versions
Siemens Simatic Reader Rf610r Cmiit	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf188ci Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf188ci	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf188c Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf188c	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf186ci Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf186ci	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf186c Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf186c	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf185c Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf185c	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Rf166c Firmware	Before 2.2

Running on/with	Platform Versions
Siemens Simatic Rf166c	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

https://cert-portal.siemens.com/productcert/html/ssa-765405.html

Source: productcert@siemens.com

Vendor Advisory

Timeline

No history available yet.