Skip to content
OpenAdvisories
High SSA-552702 1 CVE

SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products

Published Oct 11, 2022 · Updated Apr 14, 2026 · Revision 7

Vendor: Siemens Product: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) Product: RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) Product: SCALANCE M804PB (6GK5804-0AP00-2AA2) Product: SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) Product: SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) Product: SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) Product: SCALANCE M874-2 (6GK5874-2AA00-2AA2) Product: SCALANCE M874-3 (6GK5874-3AA00-2AA2) Product: SCALANCE M876-3 (6GK5876-3AA02-2BA2) Product: SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) Product: SCALANCE M876-4 (6GK5876-4AA10-2BA2) Product: SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) Product: SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) Product: SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) Product: SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) Product: SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) Product: SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) Product: SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) Product: SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) Product: SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) +121 more

Summary

The products listed below do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #7

    Added fix for SCALANCE W-700 IEEE 802.11n family

  2. #6

    Added fix for SCALANCE XM-400/XR-500 family and for SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG family

  3. #5

    Added missing affected products SCALANCE S615 EEC (6GK5615-0AA01-2AA2) and SCALANCE M876-4 (6GK5876-4AA10-2BA2)

  4. #4

    Added fix for SCALANCE W-700 IEEE 802.11ax product family

  5. #3

    Added fix for SCALANCE SC-600 family

  6. #2

    Added missing affected product SCALANCE S615

  7. #1

    Publication Date

References