Description
A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 | V6.3 | — |
| Siemens | SCALANCE M-800 | V6.3 | — |
| Siemens | SCALANCE S615 | V6.3 | — |
| Siemens | SCALANCE SC-600 | All Versions >= V2.1 and < V2.1.3 | — |
Advisories 2
- ICSA-21-068-02 Siemens SCALANCE and RUGGEDCOM Devices SSH (Update A) CISA ICS & IT advisories · May 6, 2025
- SSA-296266 SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices Siemens ProductCERT · Apr 13, 2021