Medium severity · published Dec 12, 2023
CVE-2023-49691
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
6.7
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.0), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.0), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.0), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.0), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.0), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.0), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.0), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.0), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.0), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.0), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.0), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.0), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.0), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.0). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the handling of the DDNS configuration. This could allow malicious local administrators to issue commands on system level after a successful IP address update.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
6F
6gk5615-0aa00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5615-0aa01-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5804-0ap00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5812-1aa00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5812-1ba00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5816-1aa00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5816-1ba00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5826-2ab00-2ab2 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5853-2ea00-2da1 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5856-2ea00-3aa1 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5856-2ea00-3da1 Firmware · Siemens
before 8.0 · source: NVD
6F
6gk5874-2aa00-2aa2 Firmware · Siemens
before 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-49691
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-49691
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-180704.html
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-602936.html
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-690517.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
More from 6gk5615-0aa00-2aa2 Firmware
7.5
CVE-2021-41990
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature
6.7
CVE-2023-49692
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
