Description
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SCALANCE W1788-1 M12 | All versions < V3.0.0 | — |
| Siemens | SCALANCE W1788-2 EEC M12 | All versions < V3.0.0 | — |
| Siemens | SCALANCE W1788-2 M12 | All versions < V3.0.0 | — |
| Siemens | SCALANCE W1788-2IA M12 | All versions < V3.0.0 | — |
Advisories 2
- ICSA-22-104-08 Siemens SCALANCE W1700 CISA ICS & IT advisories · May 6, 2025
- SSA-392912 SSA-392912: Multiple Denial Of Service Vulnerabilities in SCALANCE W1700 Devices Siemens ProductCERT · Apr 12, 2022