Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XSiemens Ruggedcom Rm1224 Lte\(4g\) Eu
HWSiemensall versionsSiemens Ruggedcom Rm1224 Lte\(4g\) Eu Firmware
OSSiemensall versionsSiemens Ruggedcom Rm1224 Lte\(4g\) Nam
HWSiemensall versionsSiemens Ruggedcom Rm1224 Lte\(4g\) Nam Firmware
OSSiemensall versionsSiemens Scalance M804pb
HWSiemensall versionsSiemens Scalance M804pb Firmware
OSSiemensall versionsSiemens Scalance M812 1 Adsl Router
HWSiemensall versionsSiemens Scalance M812 1 Adsl Router Firmware
OSSiemensall versionsSiemens Scalance M816 1 Adsl Router
HWSiemensall versionsSiemens Scalance M816 1 Adsl Router Firmware
OSSiemensall versionsSiemens Scalance M826 2 Shdsl Router
HWSiemensall versionsSiemens Scalance M826 2 Shdsl Router Firmware
OSSiemensall versionsSiemens Scalance M874 2
HWSiemensall versionsSiemens Scalance M874 2 Firmware
OSSiemensall versionsSiemens Scalance M874 3
HWSiemensall versionsSiemens Scalance M874 3 Firmware
OSSiemensall versionsSiemens Scalance M876 3
HWSiemensall versionsSiemens Scalance M876 3 Firmware
OSSiemensall versionsSiemens Scalance M876 4
HWSiemensall versionsSiemens Scalance M876 4 Firmware
OSSiemensall versionsSiemens Scalance Mum853 1
HWSiemensall versionsSiemens Scalance Mum853 1 Firmware
OSSiemensall versionsSiemens Scalance Mum856 1
HWSiemensall versionsSiemens Scalance Mum856 1 Firmware
OSSiemensall versionsSiemens Scalance S615
HWSiemensall versionsSiemens Scalance S615 Eec
HWSiemensall versionsSiemens Scalance S615 Eec Firmware
OSSiemensall versionsSiemens Scalance S615 Firmware
OSSiemensall versionsSiemens Scalance Sc622 2c
HWSiemensall versionsSiemens Scalance Sc622 2c Firmware
OSSiemens< 2.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-36323CRITICAL9.1PL ✓same product
Siemens Scalance M-800/S615/SC-600 — command injection umożliwiający uzyskanie root shell
CVE-2017-14491CRITICAL9.8PL ✓same product
Heap-based buffer overflow w dnsmasq umożliwiający RCE lub DoS
CVE-2024-50572HIGH8.6same product
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...
CVE-2024-50557HIGH8.6same product
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...
CVE-2024-41976HIGH8.6same product
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1),...