Siemens TCP Event Service of SCALANCE And RUGGEDCOM Devices Improper Input Validation (CVE-2022-31766)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU All versions = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 = V1.1.0 V2.0, SCALANCE WUM766-1 US All...

CVE-2022-31766

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions = V1.1.0 V3.0.0,...

CVE-2022-31766

CVE-2022-31766 affects Siemens SCALANCE and RUGGEDCOM devices (e.g., RM1224 LTE, SCALANCE M family, S615, WAM/WUM/WUM) with TCP Event service enabled. The issue is improper input validation leading to handling malformed packets, allowing an unauthenticated remote attacker to cause a denial-of-ser...

Siemens SCALANCE and RUGGEDCOM Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...