HIGH🇵🇱 Wersja polska

CVE-2024-41976

CVSS 8.6v4.0pub. 2024-08-13upd. 2024-08-23

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Eu

    HW
    Siemens
    wszystkie wersje

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Eu Firmware

    OS
    Siemens
    < 8.1

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Nam

    HW
    Siemens
    wszystkie wersje

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Nam Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M804pb

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M804pb Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M812 1 \(annex A\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M812 1 \(annex A\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M812 1 \(annex B\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M812 1 \(annex B\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M816 1 \(annex A\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M816 1 \(annex A\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M816 1 \(annex B\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M816 1 \(annex B\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M826 2 Shdsl Router

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M826 2 Shdsl Router Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M874 2

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M874 2 Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M874 3

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M874 3 3g Router \(cn\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M874 3 3g Router \(cn\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M874 3 Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M876 3

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M876 3 Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M876 3 \(rok\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M876 3 \(rok\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M876 4

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M876 4 \(eu\)

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance M876 4 \(eu\) Firmware

    OS
    Siemens
    < 8.1

  • Siemens Scalance M876 4 Firmware

    OS
    Siemens
    < 8.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEVPN
CWE
References

Related vulnerabilities

CVE-2024-50557HIGH8.6ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...

CVE-2024-50572HIGH8.6ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...

CVE-2024-41978HIGH7.1ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1),...

CVE-2024-41977HIGH7.3ten sam produkt

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1),...

CVE-2022-46140HIGH7.1ten sam produkt

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated...