HIGH🇵🇱 Wersja polska

CVE-2024-50557

CVSS 8.6v4.0pub. 2024-11-12upd. 2024-11-13

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Eu

    HW
    Siemens
    all versions

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Eu Firmware

    OS
    Siemens
    < 8.2

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Nam

    HW
    Siemens
    all versions

  • Siemens Ruggedcom Rm1224 Lte\(4g\) Nam Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M804pb

    HW
    Siemens
    all versions

  • Siemens Scalance M804pb Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M812 1 \(annex A\)

    HW
    Siemens
    all versions

  • Siemens Scalance M812 1 \(annex A\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M812 1 \(annex B\)

    HW
    Siemens
    all versions

  • Siemens Scalance M812 1 \(annex B\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M816 1 \(annex A\)

    HW
    Siemens
    all versions

  • Siemens Scalance M816 1 \(annex A\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M816 1 \(annex B\)

    HW
    Siemens
    all versions

  • Siemens Scalance M816 1 \(annex B\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M826 2

    HW
    Siemens
    all versions

  • Siemens Scalance M826 2 Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M874 2

    HW
    Siemens
    all versions

  • Siemens Scalance M874 2 Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M874 3

    HW
    Siemens
    all versions

  • Siemens Scalance M874 3 \(cn\)

    HW
    Siemens
    all versions

  • Siemens Scalance M874 3 \(cn\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M874 3 Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M876 3

    HW
    Siemens
    all versions

  • Siemens Scalance M876 3 Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M876 3 \(rok\)

    HW
    Siemens
    all versions

  • Siemens Scalance M876 3 \(rok\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M876 4

    HW
    Siemens
    all versions

  • Siemens Scalance M876 4 \(eu\)

    HW
    Siemens
    all versions

  • Siemens Scalance M876 4 \(eu\) Firmware

    OS
    Siemens
    < 8.2

  • Siemens Scalance M876 4 Firmware

    OS
    Siemens
    < 8.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-36323CRITICAL9.1PL ✓same product

Siemens Scalance M-800/S615/SC-600 — command injection umożliwiający uzyskanie root shell

CVE-2017-14491CRITICAL9.8PL ✓same product

Heap-based buffer overflow w dnsmasq umożliwiający RCE lub DoS

CVE-2024-50572HIGH8.6same product

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2),...

CVE-2024-41976HIGH8.6same product

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1),...

CVE-2024-41977HIGH7.3same product

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1),...