ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2024-50557

Siemens RUGGEDCOM RM1224 LTE EUSiemens RUGGEDCOM RM1224 LTE NAMSiemens SCALANCE M804PBSiemens SCALANCE M812-1 ADSL-RouterSiemens SCALANCE M816-1 ADSL-RouterSiemens SCALANCE M826-2 SHDSL-Router
CVSS 4.0
8.6بالا

شرح رسمی (انگلیسی)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.6بالا 4.0 CVEProject cvelistV5 (CNA) (siemens) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
7.2بالا 3.1 CVEProject cvelistV5 (CNA) (siemens) CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Siemens RUGGEDCOM RM1224 LTE(4G) EU v < V8.2 CVEProject cvelistV5 (CNA)
Siemens RUGGEDCOM RM1224 LTE(4G) NAM v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M804PB v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M812-1 ADSL-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M812-1 ADSL-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M816-1 ADSL-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M816-1 ADSL-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M826-2 SHDSL-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M874-2 v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M874-3 v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M874-3 3G-Router (CN) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M876-3 v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M876-3 (ROK) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M876-4 v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M876-4 (EU) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE M876-4 (NAM) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM853-1 (A1) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM853-1 (B1) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM853-1 (EU) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM856-1 (A1) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM856-1 (B1) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM856-1 (CN) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM856-1 (EU) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE MUM856-1 (RoW) v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE S615 EEC LAN-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens SCALANCE S615 LAN-Router v < V8.2 CVEProject cvelistV5 (CNA)
Siemens ruggedcom_rm1224_lte\(4g\)_nam_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m804pb_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m812-1_\(annex_b\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m816-1_\(annex_b\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m874-3_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m876-3_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_m876-4_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum853-1_\(a1\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum853-1_\(b1\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum853-1_\(eu\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum856-1_\(a1\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum856-1_\(b1\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum856-1_\(cn\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum856-1_\(eu\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_mum856-1_\(row\)_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_s615_eec_firmware v < 8.2 CISA ADP / Vulnrichment
Siemens scalance_s615_firmware v < 8.2 CISA ADP / Vulnrichment

منابع و راهنماها

۱
کانال تلگرام کُلون @kolunsec_fa تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۰۸/۲۲
آخرین به‌روزرسانی
۱۴۰۳/۰۸/۳۰
وضعیت
منتشرشده
صادرکننده (CNA)
siemens

پیش‌بینی بهره‌برداری (EPSS)

۰٫۹٪
احتمال بهره‌برداری در ۳۰ روز
۵۹٫۸٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-20
    Improper Input Validation