High SSA-697140 1 CVE

SSA-697140: Denial of Service Vulnerability in the TCP Event Service of SCALANCE and RUGGEDCOM Products

Published Oct 11, 2022 · Updated Feb 11, 2025 · Revision 4

Summary

The products listed below contain a denial of service vulnerability in the TCP event interface that could allow an unauthenticated remote attacker to render the device unusable.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

High 8.6

CVE-2022-31766

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGED…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M804PB ICS / OT

Oct 11, 2022

Revision history

2025-02-11 #4
Corrected fix for CVE-2022-31766 for SCALANCE W-700 IEEE 802.11ax family devices
2023-03-14 #3
Added missing affected products SCALANCE S615 EEC (6GK5615-0AA01-2AA2) and SCALANCE M876-4 (6GK5876-4AA10-2BA2)
2023-01-10 #2
Added fix for SCALANCE W-700 IEEE 802.11ax product family
2022-10-11 #1
Publication Date

References

SSA-697140: Denial of Service Vulnerability in the TCP Event Service of SCALANCE and RUGGEDCOM Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-697140.html