4.9
Medium
CVE-2023-44318 Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the…
Description
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RM1224 LTE(4G) EU | Versions not published | |
| RUGGEDCOM RM1224 LTE(4G) NAM | Versions not published | |
| SCALANCE M804PB | Versions not published | |
| SCALANCE M812-1 ADSL-Router | Versions not published | |
| SCALANCE M816-1 ADSL-Router | Versions not published | |
| SCALANCE M826-2 SHDSL-Router | Versions not published | |
| SCALANCE M874-2 | Versions not published | |
| SCALANCE M874-3 | Versions not published | |
| SCALANCE M876-3 | Versions not published |
Show the 95 other branches Hide the 95 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SCALANCE M876-3 (ROK) | Versions not published | |
| SCALANCE M876-4 | Versions not published | |
| SCALANCE M876-4 (EU) | Versions not published | |
| SCALANCE M876-4 (NAM) | Versions not published | |
| SCALANCE MUM853-1 (EU) | Versions not published | |
| SCALANCE MUM856-1 (EU) | Versions not published | |
| SCALANCE MUM856-1 (RoW) | Versions not published | |
| SCALANCE S615 EEC LAN-Router | Versions not published | |
| SCALANCE S615 LAN-Router | Versions not published | |
| SCALANCE XB205-3 (SC, PN) | Versions not published | |
| SCALANCE XB205-3 (ST, E/IP) | Versions not published | |
| SCALANCE XB205-3 (ST, PN) | Versions not published | |
| SCALANCE XB205-3LD (SC, E/IP) | Versions not published | |
| SCALANCE XB205-3LD (SC, PN) | Versions not published | |
| SCALANCE XB206-2 (SC) | Versions not published | |
| SCALANCE XB206-2 (ST/BFOC) | Versions not published | |
| SCALANCE XB206-2 LD | Versions not published | |
| SCALANCE XB206-2 SC | Versions not published | |
| SCALANCE XB206-2 ST | Versions not published | |
| SCALANCE XB206-2LD | Versions not published | |
| SCALANCE XB208 (E/IP) | Versions not published | |
| SCALANCE XB208 (PN) | Versions not published | |
| SCALANCE XB213-3 (SC, E/IP) | Versions not published | |
| SCALANCE XB213-3 (SC, PN) | Versions not published | |
| SCALANCE XB213-3 (ST, E/IP) | Versions not published | |
| SCALANCE XB213-3 (ST, PN) | Versions not published | |
| SCALANCE XB213-3LD (SC, E/IP) | Versions not published | |
| SCALANCE XB213-3LD (SC, PN) | Versions not published | |
| SCALANCE XB216 (E/IP) | Versions not published | |
| SCALANCE XB216 (PN) | Versions not published | |
| SCALANCE XC206-2 (SC) | Versions not published | |
| SCALANCE XC206-2 (ST/BFOC) | Versions not published | |
| SCALANCE XC206-2G PoE | Versions not published | |
| SCALANCE XC206-2G PoE (54 V DC) | Versions not published | |
| SCALANCE XC206-2G PoE EEC (54 V DC) | Versions not published | |
| SCALANCE XC206-2SFP | Versions not published | |
| SCALANCE XC206-2SFP EEC | Versions not published | |
| SCALANCE XC206-2SFP G | Versions not published | |
| SCALANCE XC206-2SFP G (EIP DEF.) | Versions not published | |
| SCALANCE XC206-2SFP G EEC | Versions not published | |
| SCALANCE XC208 | Versions not published | |
| SCALANCE XC208EEC | Versions not published | |
| SCALANCE XC208G | Versions not published | |
| SCALANCE XC208G (EIP def.) | Versions not published | |
| SCALANCE XC208G EEC | Versions not published | |
| SCALANCE XC208G PoE | Versions not published | |
| SCALANCE XC208G PoE (54 V DC) | Versions not published | |
| SCALANCE XC216 | Versions not published | |
| SCALANCE XC216-3G PoE | Versions not published | |
| SCALANCE XC216-3G PoE (54 V DC) | Versions not published | |
| SCALANCE XC216-4C | Versions not published | |
| SCALANCE XC216-4C G | Versions not published | |
| SCALANCE XC216-4C G (EIP Def.) | Versions not published | |
| SCALANCE XC216-4C G EEC | Versions not published | |
| SCALANCE XC216EEC | Versions not published | |
| SCALANCE XC224 | Versions not published | |
| SCALANCE XC224-4C G | Versions not published | |
| SCALANCE XC224-4C G (EIP Def.) | Versions not published | |
| SCALANCE XC224-4C G EEC | Versions not published | |
| SCALANCE XF204 | Versions not published | |
| SCALANCE XF204 DNA | Versions not published | |
| SCALANCE XF204-2BA | Versions not published | |
| SCALANCE XF204-2BA DNA | Versions not published | |
| SCALANCE XF204G | Versions not published | |
| SCALANCE XP208 | Versions not published | |
| SCALANCE XP208 (Ethernet/IP) | Versions not published | |
| SCALANCE XP208EEC | Versions not published | |
| SCALANCE XP208G | Versions not published | |
| SCALANCE XP208G EEC | Versions not published | |
| SCALANCE XP208G PoE EEC | Versions not published | |
| SCALANCE XP208G PP | Versions not published | |
| SCALANCE XP208PoE EEC | Versions not published | |
| SCALANCE XP216 | Versions not published | |
| SCALANCE XP216 (Ethernet/IP) | Versions not published | |
| SCALANCE XP216 (V2) | Versions not published | |
| SCALANCE XP216EEC | Versions not published | |
| SCALANCE XP216EEC (V2) | Versions not published | |
| SCALANCE XP216G | Versions not published | |
| SCALANCE XP216G EEC | Versions not published | |
| SCALANCE XP216G PoE EEC | Versions not published | |
| SCALANCE XP216POE EEC | Versions not published | |
| SCALANCE XP216PoE EEC (V2) | Versions not published | |
| SCALANCE XR324WG (24 x FE, AC 230V) | Versions not published | |
| SCALANCE XR324WG (24 X FE, DC 24V) | Versions not published | |
| SCALANCE XR326-2C PoE WG | Versions not published | |
| SCALANCE XR326-2C PoE WG (without UL) | Versions not published | |
| SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) | Versions not published | |
| SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) | Versions not published | |
| SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) | Versions not published | |
| SCALANCE XR328-4C WG (28xGE, AC 230V) | Versions not published | |
| SCALANCE XR328-4C WG (28xGE, DC 24V) | Versions not published | |
| SIPLUS NET SCALANCE XC206-2 | Versions not published | |
| SIPLUS NET SCALANCE XC206-2SFP | Versions not published | |
| SIPLUS NET SCALANCE XC208 | Versions not published | |
| SIPLUS NET SCALANCE XC216-4C | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM RM1224 LTE(4G) EU
The 37 CVEs of RUGGEDCOM RM1224 LTE(4G) EU →
CVE-2025-40833
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests
7.5
High
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2025-23384
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1),…
3.7
Low
CVE-2024-50572
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM…
7.2
High