The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to influence the confidentiality of the protected information.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

SIMATIC Reader vulnerability lets remote attackers access unprotected operational data and compromise confidentiality.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-37991	10 Sep 202413:24	–	circl
CNNVD	Siemens SIMATIC 信息泄露漏洞	10 Sep 202400:00	–	cnnvd
CNVD	Siemens SIMATIC RFID Readers Information Disclosure Vulnerability	12 Sep 202400:00	–	cnvd
CVE	CVE-2024-37991	10 Sep 202409:36	–	cve
Cvelist	CVE-2024-37991	10 Sep 202409:36	–	cvelist
EUVD	EUVD-2024-36943	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC RFID Readers	10 Sep 202400:00	–	ics
NVD	CVE-2024-37991	10 Sep 202410:15	–	nvd
OSV	CVE-2024-37991	10 Sep 202410:15	–	osv
Positive Technologies	PT-2024-7407 · Siemens · Simatic Reader Rf615R +11	10 Sep 202400:00	–	ptsecurity

Vulners

Node

siemens_ag simatic_reader_rf610r_cmiitRange<4.2

OR

siemens_ag reader_rf610r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf615r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf615r_etsRange<4.2

OR

siemens_ag simatic_reader_rf615r_fccRange<4.2

OR

siemens_ag simatic_reader_rf650r_aribRange<4.2

OR

siemens_ag simatic_reader_rf650r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf650r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf650r_fccRange<4.2

OR

siemens_ag simatic_reader_rf680r_aribRange<4.2

OR

siemens_ag simatic_reader_rf680r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf680r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf685r_aribRange<4.2

OR

siemens_ag simatic_reader_rf685r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf685r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf685r_fccRange<4.2

OR

siemens_ag simatic_rf1140rRange<1.1

OR

siemens_ag simatic_rf1170rRange<2.2

OR

siemens_ag simatic_rf166cRange<2.2

OR

siemens_ag simatic_rf185cRange<2.2

OR

siemens_ag simatic_rf186ciRange<2.2

OR

siemens_ag simatic_rf188cRange<2.2

OR

siemens_ag simatic_rf188ciRange<2.2

OR

siemens_ag simatic_rf360rRange<2.2

OR

siemens_ag simatic_reader_rf610r_fccRange<4.2

OR

siemens_ag simatic_rf186cRange<2.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-37991
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-765405.html
web	www.web.nvd.nist.gov/view/vuln/detail

14 Apr 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 35.3

CVSS 25.4

EPSS0.00326

simatic reader remote attacker operational data data confidentiality project management vulnerability editing documents