Critical SSA-721642 1 CVE

SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4

Published Sep 10, 2024 · Updated Sep 10, 2024

Vendor: Siemens Product: SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) Product: SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) Product: SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) Product: SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) Product: SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0) Product: SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) Product: SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) Product: SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0) Product: SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) Product: SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) Product: SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) Product: SCALANCE WUB762-1 (6GK5762-1AJ00-2AA0) Product: SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) Product: SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) Product: SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) Product: SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) Product: SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0) Product: SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) Product: SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0)

Summary

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Critical 9.1

CVE-2023-44373

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini…

Siemens SCALANCE M874-3 SCALANCE M876-3 (ROK) SCALANCE M804PB ICS / OT

Nov 14, 2023

Revision history

2024-09-10 #1
Publication Date

References

SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-721642.html