Siemens SCALANCE W700 Improper Input Validation (CVE-2025-24499)

Affected devices do not properly validate input while loading the configuration files. This could allow an authenticated remote attacker to execute arbitrary shell commands on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2025-24499

A vulnerability has been identified in SCALANCE WAB762-1 6GK5762-1AJ00-6AA0 All versions V3.0.0, SCALANCE WAM763-1 6GK5763-1AL00-7DA0 All versions V3.0.0, SCALANCE WAM763-1 ME 6GK5763-1AL00-7DC0 All versions V3.0.0, SCALANCE WAM763-1 US 6GK5763-1AL00-7DB0 All versions V3.0.0, SCALANCE WAM766-1...

CVE-2025-24499

creationtimestamp| type| source ---|---|--- 2025-02-11 11:09:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113984941089748504 2025-02-11 11:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjtvpzll2n 2025-02-11 12:32:32+00:00| seen|...

CVE-2025-24499

A vulnerability has been identified in SCALANCE WAB762-1 6GK5762-1AJ00-6AA0 All versions V3.0.0, SCALANCE WAM763-1 6GK5763-1AL00-7DA0 All versions V3.0.0, SCALANCE WAM763-1 ME 6GK5763-1AL00-7DC0 All versions V3.0.0, SCALANCE WAM763-1 US 6GK5763-1AL00-7DB0 All versions V3.0.0, SCALANCE WAM766-1...

CVE-2025-24499

The CVE-2025-24499 issue affects Siemens SCALANCE devices (WAB762-1, WAM763-1, WAM766-1, WUB762-1, WUM763-1, etc.) prior to V3.0.0. The vulnerability arises from improper input validation when loading configuration files, enabling an authenticated remote attacker to execute arbitrary shell comman...