Skip to content
OpenAdvisories
Medium SSA-633269 1 CVE

SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1

Published Jun 10, 2025 · Updated Jun 10, 2025

Vendor: Siemens Product: RUGGEDCOM RST2428P (6GK6242-6PA00) Product: SCALANCE XC316-8 (6GK5324-8TS00-2AC2) Product: SCALANCE XC324-4 (6GK5328-4TS00-2AC2) Product: SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) Product: SCALANCE XC332 (6GK5332-0GA00-2AC2) Product: SCALANCE XC416-8 (6GK5424-8TR00-2AC2) Product: SCALANCE XC424-4 (6GK5428-4TR00-2AC2) Product: SCALANCE XC432 (6GK5432-0GR00-2AC2) Product: SCALANCE XCH328 (6GK5328-4TS01-2EC2) Product: SCALANCE XCM324 (6GK5324-8TS01-2AC2) Product: SCALANCE XCM328 (6GK5328-4TS01-2AC2) Product: SCALANCE XCM332 (6GK5332-0GA01-2AC2) Product: SCALANCE XR302-32 (6GK5334-5TS00-2AR3) Product: SCALANCE XR302-32 (6GK5334-5TS00-3AR3) Product: SCALANCE XR302-32 (6GK5334-5TS00-4AR3) Product: SCALANCE XR322-12 (6GK5334-3TS00-2AR3) Product: SCALANCE XR322-12 (6GK5334-3TS00-3AR3) Product: SCALANCE XR322-12 (6GK5334-3TS00-4AR3) Product: SCALANCE XR326-8 (6GK5334-2TS00-2AR3) Product: SCALANCE XR326-8 (6GK5334-2TS00-3AR3) Product: SCALANCE XR326-8 (6GK5334-2TS00-4AR3) Product: SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) Product: SCALANCE XR502-32 (6GK5534-5TR00-2AR3) Product: SCALANCE XR502-32 (6GK5534-5TR00-3AR3) Product: SCALANCE XR502-32 (6GK5534-5TR00-4AR3) Product: SCALANCE XR522-12 (6GK5534-3TR00-2AR3) Product: SCALANCE XR522-12 (6GK5534-3TR00-3AR3) Product: SCALANCE XR522-12 (6GK5534-3TR00-4AR3) Product: SCALANCE XR526-8 (6GK5534-2TR00-2AR3) +12 more

Summary

Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References