Lucene search
+L

2411 matches found

Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•54 views

PT-2023-7781 · Siemens · Scalance M826-2 Shdsl-Router +11

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions prior to V8.0 RUGGEDCOM RM1224 LTE4G NAM versions prior to V8.0 SCALANCE M804PB versions prior to V8.0 SCALANCE M812-1 ADSL-Router versions prior to V8.0 SCALANCE M816-1 ADSL-Router versions prior to V8.0...

8.3CVSS7.7AI score0.00644EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•19 views

Siemens RUGGEDCOM RM1224 操作系统命令注入漏洞

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An operating system command injection vulnerability exists in the Siemens SCALANCE M-800/S615 series, which can be exploited by an attacker to execute commands on the system via a malicious local administrator...

7.2CVSS7.6AI score0.00623EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•4 views

CVE-2023-49691: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.0, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.0, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.0, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.0, SCALANCE...

7.2CVSS6.5AI score0.00644EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•4 views

CVE-2023-49692: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...

7.2CVSS6.5AI score0.00623EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/12/12 12:00 a.m.•19 views

The vulnerability of Siemens SCALANCE industrial switches’ SSH server allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of Siemens SCALANCE industrial switches’ SSH server is related to insufficient encryption strength. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

9.7CVSS7.4AI score0.00256EPSS
SaveExploits0References2Affected Software12
ICS
ICS
•added 2023/12/12 12:00 a.m.•57 views

Siemens SICAM Q100 Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

8.6CVSS7.9AI score0.00623EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•24 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to the use of a weak password hash function, allows attackers to modify the device’s configuration.

The vulnerability of Siemens SCALANCE industrial switches’ microprogrammed software is related to the use of a weak password hash function. Exploiting this vulnerability could allow an attacker to remotely modify the device’s configuration...

6.1CVSS6.3AI score0.00446EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•19 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the possibility of loading unreliable external data alongside reliable data, allowing a perpetrator to execute arbitrary code.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.6AI score0.00376EPSS
SaveExploits0References4Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•18 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to the use of a rigidly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

6.1CVSS6.3AI score0.00688EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•20 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software arises from the lack of measures to neutralize special elements, allowing a perpetrator to execute arbitrary codes.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to disable user notifications remotely...

9.1CVSS7.2AI score0.01341EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•22 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger maintenance failures remotely...

3.3CVSS6.5AI score0.01001EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•15 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software relates to unauthorized access to shared data in a multi-threaded context, allowing attackers to gain increased privileges.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to unsynchronized access to shared data in a multi-threaded context. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...

6.8CVSS7.2AI score0.00666EPSS
SaveExploits0References4Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•18 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to security mechanism errors, allows a intruder to alter the user interface.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to security mechanism errors. Exploiting this vulnerability could allow a malicious actor to alter the user interface remotely...

4.3CVSS5.4AI score0.00643EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•18 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the improper checking of the return value of methods or functions, allowing attackers to disable user notifications.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability could allow a malicious actor to disable user notifications remotely...

3.7CVSS6.2AI score0.00879EPSS
SaveExploits0References3Affected Software40
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•97 views

Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2023-86591)

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

9.4CVSS6.9AI score0.01341EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•78 views

Unchecked Return Value Vulnerability in Multiple Siemens Products

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

5.9CVSS6.7AI score0.00879EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•87 views

Weak Encryption Vulnerability in Multiple Siemens Products

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

6.9CVSS6.7AI score0.00446EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•82 views

Multiple Siemens Products Forced Browsing Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

4.3CVSS6.7AI score0.00643EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•80 views

Multiple Siemens products use hard-coded encryption key vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

6.9CVSS6.5AI score0.00688EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•83 views

Unsynchronized Access to Shared Data Vulnerability in Multiple Siemens Products in a Multi-Threaded Context

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

8.8CVSS7AI score0.00666EPSS
SaveExploits0References1
Rows per page
Query Builder