Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | < V7.2, < V8.0 | V7.2 |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M804PB | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M812-1 ADSL-Router | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M816-1 ADSL-Router | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M826-2 SHDSL-Router | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M874-2 | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M874-3 | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M876-3 | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M876-3 (ROK) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M876-4 | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M876-4 (EU) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE M876-4 (NAM) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE MUM853-1 (EU) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE MUM856-1 (EU) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE MUM856-1 (RoW) | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE S615 EEC LAN-Router | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE S615 LAN-Router | < V7.2, < V8.0 | V7.2 |
| Siemens | SCALANCE SC622-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE SC626-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE SC632-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE SC636-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE SC642-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE SC646-2C | < V2.3, V2.3 – < V3.0 | V2.3 |
| Siemens | SCALANCE W1748-1 M12 | — | — |
| Siemens | SCALANCE W1788-1 M12 | — | — |
| Siemens | SCALANCE W1788-2 EEC M12 | — | — |
| Siemens | SCALANCE W1788-2 M12 | — | — |
| Siemens | SCALANCE W1788-2IA M12 | — | — |
| Siemens | SCALANCE W721-1 RJ45 | — | — |
| Siemens | SCALANCE W722-1 RJ45 | — | — |
| Siemens | SCALANCE W734-1 RJ45 | — | — |
| Siemens | SCALANCE W734-1 RJ45 (USA) | — | — |
| Siemens | SCALANCE W738-1 M12 | — | — |
| Siemens | SCALANCE W748-1 M12 | — | — |
| Siemens | SCALANCE W748-1 RJ45 | — | — |
| Siemens | SCALANCE W761-1 RJ45 | — | — |
| Siemens | SCALANCE W774-1 M12 EEC | — | — |
| Siemens | SCALANCE W774-1 RJ45 | — | — |
| Siemens | SCALANCE W774-1 RJ45 (USA) | — | — |
| Siemens | SCALANCE W778-1 M12 | — | — |
| Siemens | SCALANCE W778-1 M12 EEC | — | — |
| Siemens | SCALANCE W778-1 M12 EEC (USA) | — | — |
| Siemens | SCALANCE W786-1 RJ45 | — | — |
| Siemens | SCALANCE W786-2 RJ45 | — | — |
| Siemens | SCALANCE W786-2 SFP | — | — |
| Siemens | SCALANCE W786-2IA RJ45 | — | — |
| Siemens | SCALANCE W788-1 M12 | — | — |
| Siemens | SCALANCE W788-1 RJ45 | — | — |
| Siemens | SCALANCE W788-2 M12 | — | — |
| Siemens | SCALANCE W788-2 M12 EEC | — | — |
| Siemens | SCALANCE W788-2 RJ45 | — | — |
| Siemens | SCALANCE WAB762-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM763-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM763-1 (ME) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM763-1 (US) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 (ME) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 (US) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 EEC | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 EEC (ME) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WAM766-1 EEC (US) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUB762-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUB762-1 iFeatures | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUM763-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUM763-1 (US) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUM766-1 | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUM766-1 (ME) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE WUM766-1 (USA) | < V3.0.0 | V3.0.0 |
| Siemens | SCALANCE XB205-3 (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3 (ST, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3 (ST, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3LD (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB205-3LD (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB208 (E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB208 (PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (ST, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3 (ST, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3LD (SC, E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB213-3LD (SC, PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB216 (E/IP) | < V4.4 | V4.4 |
| Siemens | SCALANCE XB216 (PN) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2 (SC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2 (ST/BFOC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2G PoE EEC (54 V DC) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G (EIP DEF.) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC206-2SFP G EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208 | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G (EIP def.) | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G EEC | < V4.4 | V4.4 |
| Siemens | SCALANCE XC208G PoE | < V4.4 | V4.4 |
Advisories 4
- ICSA-22-349-04 Siemens SCALANCE Products CISA ICS & IT advisories · May 6, 2025
- SSA-413565 SSA-413565: Multiple Vulnerabilities in SCALANCE Products Siemens ProductCERT · Jan 14, 2025
- ICSA-23-348-14 Siemens RUGGEDCOM and SCALANCE M-800/S615 Family CISA ICS & IT advisories · Aug 13, 2024
- SSA-180704 SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 Siemens ProductCERT · Aug 13, 2024