Description
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | < V8.0 | V8.0 |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | < V8.0 | V8.0 |
| Siemens | SCALANCE M804PB | < V8.0 | V8.0 |
| Siemens | SCALANCE M812-1 ADSL-Router | < V8.0 | V8.0 |
| Siemens | SCALANCE M816-1 ADSL-Router | < V8.0 | V8.0 |
| Siemens | SCALANCE M826-2 SHDSL-Router | < V8.0 | V8.0 |
| Siemens | SCALANCE M874-2 | < V8.0 | V8.0 |
| Siemens | SCALANCE M874-3 | < V8.0 | V8.0 |
| Siemens | SCALANCE M876-3 | < V8.0 | V8.0 |
| Siemens | SCALANCE M876-3 (ROK) | < V8.0 | V8.0 |
| Siemens | SCALANCE M876-4 | < V8.0 | V8.0 |
| Siemens | SCALANCE M876-4 (EU) | < V8.0 | V8.0 |
| Siemens | SCALANCE M876-4 (NAM) | < V8.0 | V8.0 |
| Siemens | SCALANCE MUM853-1 (EU) | < V8.0 | V8.0 |
| Siemens | SCALANCE MUM856-1 (EU) | < V8.0 | V8.0 |
| Siemens | SCALANCE MUM856-1 (RoW) | < V8.0 | V8.0 |
| Siemens | SCALANCE S615 EEC LAN-Router | < V8.0 | V8.0 |
| Siemens | SCALANCE S615 LAN-Router | < V8.0 | V8.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W778-1 M12 EEC (USA) | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2 SFP | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W786-2IA RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-1 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-1 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 M12 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 M12 EEC | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE W788-2 RJ45 | < V6.6.0 | V6.6.0 |
| Siemens | SCALANCE WAB762-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM763-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM763-1 (ME) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM763-1 (US) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 (ME) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 (US) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 EEC | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 EEC (ME) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WAM766-1 EEC (US) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUB762-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUB762-1 iFeatures | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUM763-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUM763-1 (US) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUM766-1 | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUM766-1 (ME) | < V2.4.0 | V2.4.0 |
| Siemens | SCALANCE WUM766-1 (USA) | < V2.4.0 | V2.4.0 |
Advisories 12
- ICSA-26-111-07 Siemens SCALANCE CISA ICS & IT advisories · Apr 21, 2026
- NCSC-2026-0112 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 14, 2026
- SSA-019200 SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.0 Siemens ProductCERT · Apr 14, 2026
- ICSA-24-256-13 Siemens SCALANCE W700 CISA ICS & IT advisories · May 6, 2025
- SSA-721642 SSA-721642: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4 Siemens ProductCERT · Sep 10, 2024
- SSA-180704 SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 Siemens ProductCERT · Aug 13, 2024
- ICSA-23-348-14 Siemens RUGGEDCOM and SCALANCE M-800/S615 Family CISA ICS & IT advisories · Aug 13, 2024
- NCSC-2024-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 11, 2024
- SSA-699386 SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 Siemens ProductCERT · Mar 12, 2024
- ICSA-23-320-08 Siemens SCALANCE Family Products CISA ICS & IT advisories · Mar 12, 2024
- SSA-602936 SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1 Siemens ProductCERT · Feb 13, 2024
- ICSA-24-046-09 Siemens SCALANCE SC-600 Family CISA ICS & IT advisories · Feb 13, 2024
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-699386.html
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-602936.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
- https://cert-portal.siemens.com/productcert/html/ssa-721642.html
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html