High SSA-457702 3 CVEs

SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family

Published Nov 14, 2023 · Updated Apr 9, 2024 · Revision 2

Vendor: Siemens Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) Product: SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) Product: SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) Product: SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) Product: SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) Product: SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) Product: SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) Product: SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) Product: SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) Product: SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) Product: SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) Product: SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) Product: SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) Product: SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6) Product: SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0) Product: SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0) Product: SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0) Product: SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0) Product: SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0) Product: SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0) Product: SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0) Product: SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0) Product: SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0) Product: SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0) Product: SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0) Product: SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6) Product: SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0) Product: SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0) +35 more

Summary

The SCALANCE W700 devices are affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information, to steal the victims session or to execute denial-of-service attacks.

Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 3

High 8.4

CVE-2024-30191

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0…

Siemens SCALANCE WAM766-1 (US) SCALANCE WAM763-1 SCALANCE WUM763-1 ICS / OT

Apr 9, 2024
Medium 6.1

CVE-2024-30189

A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions), SCALANCE W721-1 RJ45 (…

Siemens SCALANCE W721-1 RJ45 SCALANCE W786-2 SFP SCALANCE W774-1 RJ45 ICS / OT

Apr 9, 2024
Medium 6.1

CVE-2024-30190

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0…

Siemens SCALANCE WAM763-1 SCALANCE WAM766-1 (US) SCALANCE WAM766-1 EEC (US) ICS / OT

Apr 9, 2024

Revision history

2024-04-09 #2
Split CVE-2022-47522 in three separate CVE's: CVE-2024-30189 for Scenario 1, CVE-2024-30190 for Scenario 2, CVE-2024-30191 for Scenario 3
2023-11-14 #1
Publication Date

References

SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-457702.html
SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-457702.pdf
SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-457702.txt