CVE-2024-41976
8.6
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: productcert@siemens.com (Secondary)
Description
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.
Affected (26)
Products: Siemens: Ruggedcom Rm1224 Lte(4g) Eu Firmware, Ruggedcom Rm1224 Lte(4g) Nam Firmware, Scalance M804pb Firmware, Scalance M826 2 Shdsl Router Firmware, Scalance M874 2 Firmware, Scalance M874 3 Firmware, Scalance M876 3 Firmware, Scalance M876 4 Firmware, Scalance M874 3 3g Router (cn) Firmware, Scalance M876 3 (rok) Firmware, Scalance M876 4 (eu) Firmware, Scalance M876 4 (nam) Firmware, Scalance Mum853 1 (a1) Firmware, Scalance Mum853 1 (b1) Firmware, Scalance Mum853 1 (eu) Firmware, Scalance Mum856 1 (a1) Firmware, Scalance Mum856 1 (b1) Firmware, Scalance Mum856 1 (cn) Firmware, Scalance Mum856 1 (eu) Firmware, Scalance Mum856 1 (row) Firmware, Scalance S615 Eec Lan Router Firmware, Scalance S615 Lan Router Firmware, Scalance M812 1 (annex A) Firmware, Scalance M812 1 (annex B) Firmware, Scalance M816 1 (annex A) Firmware, Scalance M816 1 (annex B) Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Ruggedcom Rm1224 Lte(4g) Eu | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Ruggedcom Rm1224 Lte(4g) Nam | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M804pb | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M826 2 Shdsl Router | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M874 2 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M874 3 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M876 3 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M876 4 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M874 3 3g Router (cn) | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M876 3 (rok) | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M876 4 (eu) | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M876 4 (nam) | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum853 1 (a1) | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum853 1 (b1) | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum853 1 (eu) | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum856 1 (a1) | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum856 1 (b1) | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum856 1 (cn) | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum856 1 (eu) | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Mum856 1 (row) | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S615 Eec Lan Router | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S615 Lan Router | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M812 1 (annex A) | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M812 1 (annex B) | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M816 1 (annex A) | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 8.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M816 1 (annex B) | All versions |
References (1)
Source: productcert@siemens.com
Vendor Advisory
Timeline
No history available yet.