9.1
Critical
CVE-2023-44373 Affected devices do not properly sanitize an input field
Description
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RM1224 LTE(4G) EU 8.0 | earliest → < 8.0 | 8.0 |
| RUGGEDCOM RM1224 LTE(4G) NAM 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M804PB 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M812-1 ADSL-Router 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M816-1 ADSL-Router 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M826-2 SHDSL-Router 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M874-2 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M874-3 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M876-3 8.0 | earliest → < 8.0 | 8.0 |
Show the 53 other branches Hide the 53 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SCALANCE M876-3 (ROK) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M876-4 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M876-4 (EU) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE M876-4 (NAM) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE MUM853-1 (EU) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE MUM856-1 (EU) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE MUM856-1 (RoW) 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE S615 EEC LAN-Router 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE S615 LAN-Router 8.0 | earliest → < 8.0 | 8.0 |
| SCALANCE WAB762-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM763-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM763-1 (ME) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM763-1 (US) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 (EU) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 (ME) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 (US) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 EEC (EU) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 EEC (ME) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 EEC (US) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUB762-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM763-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM763-1 (US) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM766-1 (EU) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM766-1 (ME) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM766-1 (US) 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE W721-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W722-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W734-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W734-1 RJ45 (USA) 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W738-1 M12 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W748-1 M12 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W748-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W761-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W774-1 M12 EEC 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W774-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W774-1 RJ45 (USA) 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W778-1 M12 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W778-1 M12 EEC 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W778-1 M12 EEC (USA) 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W786-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W786-2 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W786-2 SFP 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W786-2IA RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W788-1 M12 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W788-1 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W788-2 M12 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W788-2 M12 EEC 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE W788-2 RJ45 6.6 | earliest → < 6.6.0 | 6.6.0 |
| SCALANCE WAM766-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WAM766-1 EEC 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUB762-1 iFeatures 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM766-1 2.4 | earliest → < 2.4.0 | 2.4.0 |
| SCALANCE WUM766-1 (USA) 2.4 | earliest → < 2.4.0 | 2.4.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM RM1224 LTE(4G) EU
The 37 CVEs of RUGGEDCOM RM1224 LTE(4G) EU →
CVE-2025-40833
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests
7.5
High
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2025-23384
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1),…
3.7
Low
CVE-2024-50572
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM…
7.2
High