Skip to content
OpenAdvisories
High SSA-413565 5 CVEs

SSA-413565: Multiple Vulnerabilities in SCALANCE Products

Published Dec 13, 2022 · Updated Jan 14, 2025 · Revision 5

Vendor: Siemens Product: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) Product: RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) Product: SCALANCE M804PB (6GK5804-0AP00-2AA2) Product: SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) Product: SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) Product: SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) Product: SCALANCE M874-2 (6GK5874-2AA00-2AA2) Product: SCALANCE M874-3 (6GK5874-3AA00-2AA2) Product: SCALANCE M876-3 (6GK5876-3AA02-2BA2) Product: SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) Product: SCALANCE M876-4 (6GK5876-4AA10-2BA2) Product: SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) Product: SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) Product: SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) Product: SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) Product: SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) Product: SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) Product: SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC626-2C (6GK5626-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) Product: SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) +121 more

Summary

Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 5

Revision history

  1. #5

    SCALANCE W-700 IEEE 802.11ax family: added fix for CVE-2022-34821, corrected fix for CVE-2022-46143 and clarified that the devices were also affected by CVE-2022-46144 with fix in V2.0.0; added CVSSv4 vectors for all CVE IDs

  2. #4

    Removed SCALANCE WAM766-1 6GHz devices with MLFBs 6GK5766-1JE00 as they are currently still unreleased, updated CVE-2022-34821 still unfixed and no fix planned for SCALANCE W-700 IEEE 802.11ax family

  3. #3

    Added fix to SCALANCE XB-200, XC-200, XP-200, XF-200BA, XR-300WG and XR-500 families

  4. #2

    Added fix for SCALANCE WxM-700 family, RUGGEDCOM RM1224 family, SCALANCE M-800 family, SCALANCE MUM-800 family and SCALANCE S615 family

  5. #1

    Publication Date

References