A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.

Attack Vector Network

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.01274.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Siemens RUGGEDCOM RM1224 LTE(4G) EU unknown
Version Status Constraints
0 affected < V8.1
Siemens RUGGEDCOM RM1224 LTE(4G) NAM unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M804PB unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M812-1 ADSL-Router family unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M816-1 ADSL-Router family unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M826-2 SHDSL-Router unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M874-2 unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M874-3 unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M874-3 3G-Router (CN) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M876-3 unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M876-3 (ROK) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M876-4 unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M876-4 (EU) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE M876-4 (NAM) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM853-1 (A1) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM853-1 (B1) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM853-1 (EU) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM856-1 (A1) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM856-1 (B1) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM856-1 (CN) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM856-1 (EU) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE MUM856-1 (RoW) unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE S615 EEC LAN-Router unknown
Version Status Constraints
0 affected < V8.1
Siemens SCALANCE S615 LAN-Router unknown
Version Status Constraints
0 affected < V8.1

Configuration 1 [-]

AND
cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:siemens:scalance_m826-2_shdsl-router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:siemens:scalance_m874-3_3g-router_\(cn\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3_3g-router_\(cn\):-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:*

Configuration 14 [-]

AND
cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:*

Configuration 15 [-]

AND
cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:*

Configuration 16 [-]

AND
cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:*

Configuration 17 [-]

AND
cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:*

Configuration 18 [-]

AND
cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:*

Configuration 19 [-]

AND
cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:*

Configuration 20 [-]

AND
cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:*

Configuration 21 [-]

AND
cpe:2.3:o:siemens:scalance_s615_eec_lan-router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_eec_lan-router:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND
cpe:2.3:o:siemens:scalance_s615_lan-router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_lan-router:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND
cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:*

Configuration 24 [-]

AND
cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:*

Configuration 25 [-]

AND
cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:*

Configuration 26 [-]

AND
cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Siemens Subscribe
Ruggedcom Rm1224 Lte\(4g\) Eu Subscribe
Ruggedcom Rm1224 Lte\(4g\) Eu Firmware Subscribe
Ruggedcom Rm1224 Lte\(4g\) Nam Subscribe
Ruggedcom Rm1224 Lte\(4g\) Nam Firmware Subscribe
Scalance M804pb Subscribe
Scalance M804pb Firmware Subscribe
Scalance M812-1 \(annex A\) Subscribe
Scalance M812-1 \(annex A\) Firmware Subscribe
Scalance M812-1 \(annex B\) Subscribe
Scalance M812-1 \(annex B\) Firmware Subscribe
Scalance M812-1 Adsl-router Subscribe
Scalance M816-1 \(annex A\) Subscribe
Scalance M816-1 \(annex A\) Firmware Subscribe
Scalance M816-1 \(annex B\) Subscribe
Scalance M816-1 \(annex B\) Firmware Subscribe
Scalance M816-1 Adsl-router Subscribe
Scalance M826-2 Shdsl-router Subscribe
Scalance M826-2 Shdsl-router Firmware Subscribe
Scalance M874-2 Subscribe
Scalance M874-2 Firmware Subscribe
Scalance M874-3 Subscribe
Scalance M874-3 3g-router \(cn\) Subscribe
Scalance M874-3 3g-router \(cn\) Firmware Subscribe
Scalance M874-3 Firmware Subscribe
Scalance M876-3 Subscribe
Scalance M876-3 \(rok\) Subscribe
Scalance M876-3 \(rok\) Firmware Subscribe
Scalance M876-3 Firmware Subscribe
Scalance M876-4 Subscribe
Scalance M876-4 \(eu\) Subscribe
Scalance M876-4 \(eu\) Firmware Subscribe
Scalance M876-4 \(nam\) Subscribe
Scalance M876-4 \(nam\) Firmware Subscribe
Scalance M876-4 Firmware Subscribe
Scalance Mum853-1 \(a1\) Subscribe
Scalance Mum853-1 \(a1\) Firmware Subscribe
Scalance Mum853-1 \(b1\) Subscribe
Scalance Mum853-1 \(b1\) Firmware Subscribe
Scalance Mum853-1 \(eu\) Subscribe
Scalance Mum853-1 \(eu\) Firmware Subscribe
Scalance Mum856-1 \(a1\) Subscribe
Scalance Mum856-1 \(a1\) Firmware Subscribe
Scalance Mum856-1 \(b1\) Subscribe
Scalance Mum856-1 \(b1\) Firmware Subscribe
Scalance Mum856-1 \(cn\) Subscribe
Scalance Mum856-1 \(cn\) Firmware Subscribe
Scalance Mum856-1 \(eu\) Subscribe
Scalance Mum856-1 \(eu\) Firmware Subscribe
Scalance Mum856-1 \(row\) Subscribe
Scalance Mum856-1 \(row\) Firmware Subscribe
Scalance S615 Eec Lan-router Subscribe
Scalance S615 Eec Lan-router Firmware Subscribe
Scalance S615 Lan-router Subscribe
Scalance S615 Lan-router Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2024-39305 A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://cert-portal.siemens.com/productcert/html/ssa-087301.html cve-icon cve-icon
History

Fri, 23 Aug 2024 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Siemens ruggedcom Rm1224 Lte\(4g\) Eu Firmware
Siemens ruggedcom Rm1224 Lte\(4g\) Nam Firmware
Siemens scalance M804pb Firmware
Siemens scalance M812-1 \(annex A\)
Siemens scalance M812-1 \(annex A\) Firmware
Siemens scalance M812-1 \(annex B\)
Siemens scalance M812-1 \(annex B\) Firmware
Siemens scalance M816-1 \(annex A\)
Siemens scalance M816-1 \(annex A\) Firmware
Siemens scalance M816-1 \(annex B\)
Siemens scalance M816-1 \(annex B\) Firmware
Siemens scalance M826-2 Shdsl-router Firmware
Siemens scalance M874-2 Firmware
Siemens scalance M874-3 3g-router \(cn\) Firmware
Siemens scalance M874-3 Firmware
Siemens scalance M876-3 \(rok\) Firmware
Siemens scalance M876-3 Firmware
Siemens scalance M876-4 \(eu\) Firmware
Siemens scalance M876-4 \(nam\) Firmware
Siemens scalance M876-4 Firmware
Siemens scalance Mum853-1 \(a1\) Firmware
Siemens scalance Mum853-1 \(b1\) Firmware
Siemens scalance Mum853-1 \(eu\) Firmware
Siemens scalance Mum856-1 \(a1\) Firmware
Siemens scalance Mum856-1 \(b1\) Firmware
Siemens scalance Mum856-1 \(cn\) Firmware
Siemens scalance Mum856-1 \(eu\) Firmware
Siemens scalance Mum856-1 \(row\) Firmware
Siemens scalance S615 Eec Lan-router Firmware
Siemens scalance S615 Lan-router Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3_3g-router_\(cn\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_eec_lan-router:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_lan-router:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m826-2_shdsl-router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m874-3_3g-router_\(cn\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_s615_eec_lan-router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:scalance_s615_lan-router_firmware:*:*:*:*:*:*:*:*
Vendors & Products Siemens ruggedcom Rm1224 Lte\(4g\) Eu Firmware
Siemens ruggedcom Rm1224 Lte\(4g\) Nam Firmware
Siemens scalance M804pb Firmware
Siemens scalance M812-1 \(annex A\)
Siemens scalance M812-1 \(annex A\) Firmware
Siemens scalance M812-1 \(annex B\)
Siemens scalance M812-1 \(annex B\) Firmware
Siemens scalance M816-1 \(annex A\)
Siemens scalance M816-1 \(annex A\) Firmware
Siemens scalance M816-1 \(annex B\)
Siemens scalance M816-1 \(annex B\) Firmware
Siemens scalance M826-2 Shdsl-router Firmware
Siemens scalance M874-2 Firmware
Siemens scalance M874-3 3g-router \(cn\) Firmware
Siemens scalance M874-3 Firmware
Siemens scalance M876-3 \(rok\) Firmware
Siemens scalance M876-3 Firmware
Siemens scalance M876-4 \(eu\) Firmware
Siemens scalance M876-4 \(nam\) Firmware
Siemens scalance M876-4 Firmware
Siemens scalance Mum853-1 \(a1\) Firmware
Siemens scalance Mum853-1 \(b1\) Firmware
Siemens scalance Mum853-1 \(eu\) Firmware
Siemens scalance Mum856-1 \(a1\) Firmware
Siemens scalance Mum856-1 \(b1\) Firmware
Siemens scalance Mum856-1 \(cn\) Firmware
Siemens scalance Mum856-1 \(eu\) Firmware
Siemens scalance Mum856-1 \(row\) Firmware
Siemens scalance S615 Eec Lan-router Firmware
Siemens scalance S615 Lan-router Firmware

Wed, 14 Aug 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens ruggedcom Rm1224 Lte\(4g\) Eu
Siemens ruggedcom Rm1224 Lte\(4g\) Nam
Siemens scalance M804pb
Siemens scalance M812-1 Adsl-router
Siemens scalance M816-1 Adsl-router
Siemens scalance M826-2 Shdsl-router
Siemens scalance M874-2
Siemens scalance M874-3
Siemens scalance M874-3 3g-router \(cn\)
Siemens scalance M876-3
Siemens scalance M876-3 \(rok\)
Siemens scalance M876-4
Siemens scalance M876-4 \(eu\)
Siemens scalance M876-4 \(nam\)
Siemens scalance Mum853-1 \(a1\)
Siemens scalance Mum853-1 \(b1\)
Siemens scalance Mum853-1 \(eu\)
Siemens scalance Mum856-1 \(a1\)
Siemens scalance Mum856-1 \(b1\)
Siemens scalance Mum856-1 \(cn\)
Siemens scalance Mum856-1 \(eu\)
Siemens scalance Mum856-1 \(row\)
Siemens scalance S615 Eec Lan-router
Siemens scalance S615 Lan-router
CPEs cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m804pb:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m812-1_adsl-router:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m816-1_adsl-router:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-2:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m874-3_3g-router_\(cn\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-3_\(rok\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(eu\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_m876-4_\(nam\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_mum856-1_\(row\):*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_eec_lan-router:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_s615_lan-router:*:*:*:*:*:*:*:*
Vendors & Products Siemens
Siemens ruggedcom Rm1224 Lte\(4g\) Eu
Siemens ruggedcom Rm1224 Lte\(4g\) Nam
Siemens scalance M804pb
Siemens scalance M812-1 Adsl-router
Siemens scalance M816-1 Adsl-router
Siemens scalance M826-2 Shdsl-router
Siemens scalance M874-2
Siemens scalance M874-3
Siemens scalance M874-3 3g-router \(cn\)
Siemens scalance M876-3
Siemens scalance M876-3 \(rok\)
Siemens scalance M876-4
Siemens scalance M876-4 \(eu\)
Siemens scalance M876-4 \(nam\)
Siemens scalance Mum853-1 \(a1\)
Siemens scalance Mum853-1 \(b1\)
Siemens scalance Mum853-1 \(eu\)
Siemens scalance Mum856-1 \(a1\)
Siemens scalance Mum856-1 \(b1\)
Siemens scalance Mum856-1 \(cn\)
Siemens scalance Mum856-1 \(eu\)
Siemens scalance Mum856-1 \(row\)
Siemens scalance S615 Eec Lan-router
Siemens scalance S615 Lan-router
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Aug 2024 08:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2024-08-14T18:17:16.011Z

Reserved: 2024-07-25T11:00:11.939Z

Link: CVE-2024-41976

cve-icon Vulnrichment

Updated: 2024-08-14T18:17:01.416Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-13T08:15:15.403

Modified: 2024-08-23T18:40:16.173

Link: CVE-2024-41976

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses