Critical SSA-333468 4 CVEs

SSA-333468: Multiple Vulnerabilities in InterMesh Subscriber Devices

Published Oct 23, 2024 · Updated Oct 23, 2024

Vendor: Siemens Product: InterMesh 7177 Hybrid 2.0 Subscriber Product: InterMesh 7707 Fire Subscriber

Summary

InterMesh Subscriber devices contain multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

Critical 10.0

CVE-2024-47901

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fi…

Siemens InterMesh 7177 Hybrid 2.0 Subscriber InterMesh 7707 Fire Subscriber ICS / OT

Oct 23, 2024
High 7.8

CVE-2024-47904

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fi…

Siemens InterMesh 7707 Fire Subscriber InterMesh 7177 Hybrid 2.0 Subscriber ICS / OT

Oct 23, 2024
High 7.2

CVE-2024-47902

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fi…

Siemens InterMesh 7707 Fire Subscriber InterMesh 7177 Hybrid 2.0 Subscriber ICS / OT

Oct 23, 2024
Medium 5.8

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fi…

Siemens InterMesh 7177 Hybrid 2.0 Subscriber InterMesh 7707 Fire Subscriber ICS / OT

Oct 23, 2024

Revision history

2024-10-23 #1
Publication Date

References

SSA-333468: Multiple Vulnerabilities in InterMesh Subscriber Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-333468.html