Skip to content
fr Sign in
7.2 High

CVE-2025-24499 A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1…

Description

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected devices do not properly validate input while loading the configuration files. This could allow an authenticated remote attacker to execute arbitrary shell commands on the device.

Affected products and versions

Product Affected versions Fixed in
SCALANCE WAB762-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM763-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM763-1 (ME) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM763-1 (US) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM766-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM766-1 (ME) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM766-1 (US) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM766-1 EEC 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WAM766-1 EEC (ME) 3.0 earliest → < 3.0.0 3.0.0
Show the 8 other branches
Product Affected versions Fixed in
SCALANCE WAM766-1 EEC (US) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUB762-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUB762-1 iFeatures 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUM763-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUM763-1 (US) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUM766-1 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUM766-1 (ME) 3.0 earliest → < 3.0.0 3.0.0
SCALANCE WUM766-1 (USA) 3.0 earliest → < 3.0.0 3.0.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SCALANCE WAB762-1

The 16 CVEs of SCALANCE WAB762-1 →
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 High CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2025-24532 A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1… 4.3 Medium CVE-2024-50572 A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM… 7.2 High
Track this CVE