Description
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | — | — |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | — | — |
| Siemens | SCALANCE M804PB | — | — |
| Siemens | SCALANCE M812-1 ADSL-Router | — | — |
| Siemens | SCALANCE M816-1 ADSL-Router | — | — |
| Siemens | SCALANCE M826-2 SHDSL-Router | — | — |
| Siemens | SCALANCE M874-2 | — | — |
| Siemens | SCALANCE M874-3 | — | — |
| Siemens | SCALANCE M876-3 | — | — |
| Siemens | SCALANCE M876-3 (ROK) | — | — |
| Siemens | SCALANCE M876-4 | — | — |
| Siemens | SCALANCE M876-4 (EU) | — | — |
| Siemens | SCALANCE M876-4 (NAM) | — | — |
| Siemens | SCALANCE MUM853-1 (EU) | — | — |
| Siemens | SCALANCE MUM856-1 (EU) | — | — |
| Siemens | SCALANCE MUM856-1 (RoW) | — | — |
| Siemens | SCALANCE S615 EEC LAN-Router | — | — |
| Siemens | SCALANCE S615 LAN-Router | — | — |
| Siemens | SCALANCE XB205-3 (SC, PN) | — | — |
| Siemens | SCALANCE XB205-3 (ST, E/IP) | — | — |
| Siemens | SCALANCE XB205-3 (ST, PN) | — | — |
| Siemens | SCALANCE XB205-3LD (SC, E/IP) | — | — |
| Siemens | SCALANCE XB205-3LD (SC, PN) | — | — |
| Siemens | SCALANCE XB206-2 (SC) | — | — |
| Siemens | SCALANCE XB206-2 (ST/BFOC) | — | — |
| Siemens | SCALANCE XB206-2 LD | — | — |
| Siemens | SCALANCE XB206-2 SC | — | — |
| Siemens | SCALANCE XB206-2 ST | — | — |
| Siemens | SCALANCE XB206-2LD | — | — |
| Siemens | SCALANCE XB208 (E/IP) | — | — |
| Siemens | SCALANCE XB208 (PN) | — | — |
| Siemens | SCALANCE XB213-3 (SC, E/IP) | — | — |
| Siemens | SCALANCE XB213-3 (SC, PN) | — | — |
| Siemens | SCALANCE XB213-3 (ST, E/IP) | — | — |
| Siemens | SCALANCE XB213-3 (ST, PN) | — | — |
| Siemens | SCALANCE XB213-3LD (SC, E/IP) | — | — |
| Siemens | SCALANCE XB213-3LD (SC, PN) | — | — |
| Siemens | SCALANCE XB216 (E/IP) | — | — |
| Siemens | SCALANCE XB216 (PN) | — | — |
| Siemens | SCALANCE XC206-2 (SC) | — | — |
| Siemens | SCALANCE XC206-2 (ST/BFOC) | — | — |
| Siemens | SCALANCE XC206-2G PoE | — | — |
| Siemens | SCALANCE XC206-2G PoE (54 V DC) | — | — |
| Siemens | SCALANCE XC206-2G PoE EEC (54 V DC) | — | — |
| Siemens | SCALANCE XC206-2SFP | — | — |
| Siemens | SCALANCE XC206-2SFP EEC | — | — |
| Siemens | SCALANCE XC206-2SFP G | — | — |
| Siemens | SCALANCE XC206-2SFP G (EIP DEF.) | — | — |
| Siemens | SCALANCE XC206-2SFP G EEC | — | — |
| Siemens | SCALANCE XC208 | — | — |
| Siemens | SCALANCE XC208EEC | — | — |
| Siemens | SCALANCE XC208G | — | — |
| Siemens | SCALANCE XC208G (EIP def.) | — | — |
| Siemens | SCALANCE XC208G EEC | — | — |
| Siemens | SCALANCE XC208G PoE | — | — |
| Siemens | SCALANCE XC208G PoE (54 V DC) | — | — |
| Siemens | SCALANCE XC216 | — | — |
| Siemens | SCALANCE XC216-3G PoE | — | — |
| Siemens | SCALANCE XC216-3G PoE (54 V DC) | — | — |
| Siemens | SCALANCE XC216-4C | — | — |
| Siemens | SCALANCE XC216-4C G | — | — |
| Siemens | SCALANCE XC216-4C G (EIP Def.) | — | — |
| Siemens | SCALANCE XC216-4C G EEC | — | — |
| Siemens | SCALANCE XC216EEC | — | — |
| Siemens | SCALANCE XC224 | — | — |
| Siemens | SCALANCE XC224-4C G | — | — |
| Siemens | SCALANCE XC224-4C G (EIP Def.) | — | — |
| Siemens | SCALANCE XC224-4C G EEC | — | — |
| Siemens | SCALANCE XF204 | — | — |
| Siemens | SCALANCE XF204 DNA | — | — |
| Siemens | SCALANCE XF204-2BA | — | — |
| Siemens | SCALANCE XF204-2BA DNA | — | — |
| Siemens | SCALANCE XF204G | — | — |
| Siemens | SCALANCE XP208 | — | — |
| Siemens | SCALANCE XP208 (Ethernet/IP) | — | — |
| Siemens | SCALANCE XP208EEC | — | — |
| Siemens | SCALANCE XP208G | — | — |
| Siemens | SCALANCE XP208G EEC | — | — |
| Siemens | SCALANCE XP208G PoE EEC | — | — |
| Siemens | SCALANCE XP208G PP | — | — |
| Siemens | SCALANCE XP208PoE EEC | — | — |
| Siemens | SCALANCE XP216 | — | — |
| Siemens | SCALANCE XP216 (Ethernet/IP) | — | — |
| Siemens | SCALANCE XP216 (V2) | — | — |
| Siemens | SCALANCE XP216EEC | — | — |
| Siemens | SCALANCE XP216EEC (V2) | — | — |
| Siemens | SCALANCE XP216G | — | — |
| Siemens | SCALANCE XP216G EEC | — | — |
| Siemens | SCALANCE XP216G PoE EEC | — | — |
| Siemens | SCALANCE XP216POE EEC | — | — |
| Siemens | SCALANCE XP216PoE EEC (V2) | — | — |
| Siemens | SCALANCE XR324WG (24 x FE, AC 230V) | — | — |
| Siemens | SCALANCE XR324WG (24 X FE, DC 24V) | — | — |
| Siemens | SCALANCE XR326-2C PoE WG | — | — |
| Siemens | SCALANCE XR326-2C PoE WG (without UL) | — | — |
| Siemens | SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) | — | — |
| Siemens | SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) | — | — |
| Siemens | SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) | — | — |
| Siemens | SCALANCE XR328-4C WG (28xGE, AC 230V) | — | — |
| Siemens | SCALANCE XR328-4C WG (28xGE, DC 24V) | — | — |
Advisories 7
- ICSA-24-074-08 Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family CISA ICS & IT advisories · Aug 12, 2025
- SSA-353002 SSA-353002: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family Siemens ProductCERT · Aug 12, 2025
- ICSA-24-165-12 Siemens SCALANCE W700 CISA ICS & IT advisories · Jan 14, 2025
- SSA-690517 SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family Siemens ProductCERT · Jan 14, 2025
- ICSA-23-348-14 Siemens RUGGEDCOM and SCALANCE M-800/S615 Family CISA ICS & IT advisories · Aug 13, 2024
- SSA-180704 SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 Siemens ProductCERT · Aug 13, 2024
- NCSC-2024-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 11, 2024
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html