Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2024-50557

HIGH
Published 2024-11-12T12:49:56.426Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-50557. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
7.2
/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2023.03.01
0.001
probability
of exploitation in the wild

There is a 0.1% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-01-25
Exploit Probability
Percentile: 0.355
Higher than 35.5% of all CVEs

Attack Vector Metrics

Attack Vector
Not Available
Attack Complexity
Not Available
Privileges Required
Not Available
User Interaction
Not Available
Scope
Not Available

Impact Metrics

Confidentiality
Not Available
Integrity
Not Available
Availability
Not Available

Description

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Siemens

RUGGEDCOM RM1224 LTE(4G) EU

Affected Versions:

0
Siemens

RUGGEDCOM RM1224 LTE(4G) NAM

Affected Versions:

0
Siemens

SCALANCE M804PB

Affected Versions:

0
Siemens

SCALANCE M812-1 ADSL-Router

Affected Versions:

0
Siemens

SCALANCE M812-1 ADSL-Router

Affected Versions:

0
Siemens

SCALANCE M816-1 ADSL-Router

Affected Versions:

0
Siemens

SCALANCE M816-1 ADSL-Router

Affected Versions:

0
Siemens

SCALANCE M826-2 SHDSL-Router

Affected Versions:

0
Siemens

SCALANCE M874-2

Affected Versions:

0
Siemens

SCALANCE M874-3

Affected Versions:

0
Siemens

SCALANCE M874-3 3G-Router (CN)

Affected Versions:

0
Siemens

SCALANCE M876-3

Affected Versions:

0
Siemens

SCALANCE M876-3 (ROK)

Affected Versions:

0
Siemens

SCALANCE M876-4

Affected Versions:

0
Siemens

SCALANCE M876-4 (EU)

Affected Versions:

0
Siemens

SCALANCE M876-4 (NAM)

Affected Versions:

0
Siemens

SCALANCE MUM853-1 (A1)

Affected Versions:

0
Siemens

SCALANCE MUM853-1 (B1)

Affected Versions:

0
Siemens

SCALANCE MUM853-1 (EU)

Affected Versions:

0
Siemens

SCALANCE MUM856-1 (A1)

Affected Versions:

0
Siemens

SCALANCE MUM856-1 (B1)

Affected Versions:

0
Siemens

SCALANCE MUM856-1 (CN)

Affected Versions:

0
Siemens

SCALANCE MUM856-1 (EU)

Affected Versions:

0
Siemens

SCALANCE MUM856-1 (RoW)

Affected Versions:

0
Siemens

SCALANCE S615 EEC LAN-Router

Affected Versions:

0
Siemens

SCALANCE S615 LAN-Router

Affected Versions:

0
siemens

scalance_m874-3_firmware

Affected Versions:

0
siemens

scalance_m816-1_\(annex_b\)_firmware

Affected Versions:

0
siemens

scalance_s615_firmware

Affected Versions:

0
siemens

scalance_s615_eec_firmware

Affected Versions:

0
siemens

scalance_mum856-1_\(row\)_firmware

Affected Versions:

0
siemens

scalance_mum856-1_\(eu\)_firmware

Affected Versions:

0
siemens

scalance_mum856-1_\(cn\)_firmware

Affected Versions:

0
siemens

scalance_mum856-1_\(b1\)_firmware

Affected Versions:

0
siemens

scalance_mum856-1_\(a1\)_firmware

Affected Versions:

0
siemens

scalance_mum853-1_\(a1\)_firmware

Affected Versions:

0
siemens

scalance_mum853-1_\(b1\)_firmware

Affected Versions:

0
siemens

scalance_mum853-1_\(eu\)_firmware

Affected Versions:

0
siemens

scalance_m876-4_firmware

Affected Versions:

0
siemens

scalance_m876-3_firmware

Affected Versions:

0
siemens

scalance_m812-1_\(annex_b\)_firmware

Affected Versions:

0
siemens

scalance_m804pb_firmware

Affected Versions:

0
siemens

ruggedcom_rm1224_lte\(4g\)_nam_firmware

Affected Versions:

0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-7679-9xw6-2858

Advisory Details

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-50557
WEB https://cert-portal.siemens.com/productcert/html/ssa-354112.html

Advisory provided by GitHub Security Advisory Database. Published: November 12, 2024, Modified: November 12, 2024

References

https://cert-portal.siemens.com/productcert/html/ssa-354112.html
Published: 2024-11-12T12:49:56.426Z
Last Modified: 2024-11-20T16:47:43.578Z
Copied to clipboard!