Critical ICSA-24-256-13 1 CVE

Siemens SCALANCE W700

Published Sep 10, 2024 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) Product: SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) Product: SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) Product: SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) Product: SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0) Product: SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) Product: SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) Product: SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0) Product: SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) Product: SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) Product: SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) Product: SCALANCE WUB762-1 (6GK5762-1AJ00-2AA0) Product: SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) Product: SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) Product: SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) Product: SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) Product: SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0) Product: SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) Product: SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0)

Summary

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Critical 9.1

CVE-2023-44373

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M804PB ICS / OT

Nov 14, 2023

Revision history

2025-05-06 #2
Revision - Fixing typos
2024-09-10 #1
Publication Date

References

SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-721642.html
ICS Advisory ICSA-24-256-13 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-13
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B