Description
Affected devices do not properly authorize the change password function of the web interface.
This could allow low privileged users to escalate their privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | < V7.1.2 | V7.1.2 |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M804PB | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M812-1 ADSL-Router | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M816-1 ADSL-Router | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M826-2 SHDSL-Router | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M874-2 | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M874-3 | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M876-3 | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M876-3 (ROK) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M876-4 | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M876-4 (EU) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE M876-4 (NAM) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE MUM853-1 (EU) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE MUM856-1 (EU) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE MUM856-1 (RoW) | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE S615 EEC LAN-Router | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE S615 LAN-Router | < V7.1.2 | V7.1.2 |
| Siemens | SCALANCE SC622-2C | All versions < V3.0 | — |
| Siemens | SCALANCE SC632-2C | All versions < V3.0 | — |
| Siemens | SCALANCE SC636-2C | All versions < V3.0 | — |
| Siemens | SCALANCE SC642-2C | All versions < V3.0 | — |
| Siemens | SCALANCE SC646-2C | All versions < V3.0 | — |
| Siemens | SCALANCE W1748-1 M12 | — | — |
| Siemens | SCALANCE W1788-1 M12 | — | — |
| Siemens | SCALANCE W1788-2 EEC M12 | — | — |
| Siemens | SCALANCE W1788-2 M12 | — | — |
| Siemens | SCALANCE W1788-2IA M12 | — | — |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 EEC (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2 SFP | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2IA RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE WAM763-1 | All versions < V2.0 | — |
| Siemens | SCALANCE WAM766-1 | All versions < V2.0 | — |
| Siemens | SCALANCE WAM766-1 (US) | All versions < V2.0 | — |
| Siemens | SCALANCE WAM766-1 EEC | All versions < V2.0 | — |
| Siemens | SCALANCE WAM766-1 EEC (US) | All versions < V2.0 | — |
| Siemens | SCALANCE WUM763-1 | All versions < V2.0 | — |
| Siemens | SCALANCE WUM766-1 | All versions < V2.0 | — |
| Siemens | SCALANCE WUM766-1 (USA) | All versions < V2.0 | — |
| Siemens | SCALANCE XB205-3 (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3 (ST, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3 (ST, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3LD (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3LD (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB208 (E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB208 (PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (ST, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (ST, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3LD (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3LD (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB216 (E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB216 (PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2 (SC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2 (ST/BFOC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE EEC (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G (EIP DEF.) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208 | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G (EIP def.) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G PoE | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G PoE (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216 | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-3G PoE | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-3G PoE (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-4C | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-4C G | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-4C G (EIP Def.) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216-4C G EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC216EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC224 | < V4.4 | V4.4 |
Advisories 5
- ICSA-26-111-07 Siemens SCALANCE CISA ICS & IT advisories · Apr 21, 2026
- ICSA-22-286-11 Siemens SCALANCE and RUGGEDCOM Products CISA ICS & IT advisories · Apr 16, 2026
- NCSC-2026-0112 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 14, 2026
- SSA-019200 SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.0 Siemens ProductCERT · Apr 14, 2026
- SSA-552702 SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products Siemens ProductCERT · Apr 14, 2026