Critical SSA-602936 8 CVEs

SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1

Published Feb 13, 2024 · Updated Feb 13, 2024

Vendor: Siemens Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC626-2C (6GK5626-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2)

Summary

SCALANCE SC-600 Family before V3.1 is affected by multiple vulnerabilities.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 8

Critical 9.1

CVE-2023-44373

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini…

Siemens SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router SCALANCE M874-3 ICS / OT

Nov 14, 2023
High 7.2

CVE-2023-44317

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGED…

Siemens SCALANCE M874-2 SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router ICS / OT

Nov 14, 2023
High 7.2

CVE-2023-49691

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M804PB ICS / OT

Dec 12, 2023
High 7.2

CVE-2023-49692

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGED…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Dec 12, 2023
Medium 4.9

CVE-2023-44319

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Nov 14, 2023
Medium 4.3

CVE-2023-44320

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGED…

Siemens SCALANCE M876-3 (ROK) SCALANCE M804PB SCALANCE M876-4 (NAM) ICS / OT

Nov 14, 2023
Low 3.7

CVE-2023-44322

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…

Siemens SCALANCE M876-4 (EU) SCALANCE S615 LAN-Router SCALANCE M826-2 SHDSL-Router ICS / OT

Nov 14, 2023
Low 2.7

CVE-2023-44321

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…

Siemens SCALANCE M826-2 SHDSL-Router SCALANCE M874-3 SCALANCE M876-3 (ROK) ICS / OT

Nov 14, 2023

Revision history

2024-02-13 #1
Publication Date

References

SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-602936.html
SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-602936.pdf
SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-602936.txt