Summary
The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated remote code execution.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 14
-
Critical 9.8
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code …
-
Critical 9.8
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code …
-
Critical 9.8
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated re…
-
High 8.2
There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management …
-
High 8.2
There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point …
-
High 8.2
There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management…
-
High 7.5
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Succes…
-
High 7.5
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Succes…
-
High 7.5
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol.…
-
High 7.5
Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protoco…
-
High 7.5
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. S…
-
High 7.2
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation o…
-
Medium 5.5
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged pers…
-
Medium 4.3
An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulne…
Revision history
-
#2
Added fix for SCALANCE W1750D family
-
#1
Publication Date
References
-
SSA-716164: Multiple Vulnerabilities in Scalance W1750D - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-716164.html
-
SSA-716164: Multiple Vulnerabilities in Scalance W1750D - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-716164.pdf
-
SSA-716164: Multiple Vulnerabilities in Scalance W1750D - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-716164.txt