CVE-2023-44317: Siemens scalance xb208 \(e\/ip\) firmware vulnerability

Description

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

69 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Scalance Xb205 3 \(Sc\, Pn\) Firmware Siemens Scalance Xb205 3 \(St\, E\/Ip\) Firmware Siemens Scalance Xb205 3 \(St\, Pn\) Firmware Siemens Scalance Xb205 3ld \(Sc\, E\/Ip\) Firmware Siemens Scalance Xb205 3ld \(Sc\, Pn\) Firmware Siemens Scalance Xb208 \(E\/Ip\) Firmware Siemens Scalance Xb208 \(Pn\) Firmware Siemens Scalance Xb213 3 \(Sc\, E\/Ip\) Firmware Siemens Scalance Xb213 3 \(Sc\, Pn\) Firmware Siemens Scalance Xb213 3 \(St\, E\/Ip\) Firmware Siemens Scalance Xb213 3 \(St\, Pn\) Firmware Siemens Scalance Xb213 3ld \(Sc\, E\/Ip\) Firmware Siemens Scalance Xb213 3ld \(Sc\, Pn\) Firmware Siemens Scalance Xb216 \(E\/Ip\) Firmware Siemens Scalance Xb216 \(Pn\) Firmware Siemens Scalance Xc206 2 \(Sc\) Firmware Siemens Scalance Xc206 2 \(St\/Bfoc\) Firmware Siemens Scalance Xc206 2g Poe \(54 V Dc\) Firmware Siemens Scalance Xc206 2g Poe Eec \(54 V Dc\) Firmware Siemens Scalance Xc206 2g Poe Firmware Siemens Scalance Xc206 2sfp Eec Firmware Siemens Scalance Xc206 2sfp Firmware Siemens Scalance Xc206 2sfp G \(Eip Def.\) Firmware Siemens Scalance Xc206 2sfp G Eec Firmware Siemens Scalance Xc206 2sfp G Firmware Siemens Scalance Xc208 Firmware Siemens Scalance Xc208eec Firmware Siemens Scalance Xc208g \(Eip Def.\) Firmware Siemens Scalance Xc208g Eec Firmware Siemens Scalance Xc208g Firmware Siemens Scalance Xc208g Poe \(54 V Dc\) Firmware Siemens Scalance Xc208g Poe Firmware Siemens Scalance Xc216 Firmware Siemens Scalance Xc216 3g Poe \(54 V Dc\) Firmware Siemens Scalance Xc216 3g Poe Firmware Siemens Scalance Xc216 4c Firmware Siemens Scalance Xc216 4c G \(Eip Def.\) Firmware Siemens Scalance Xc216 4c G Eec Firmware Siemens Scalance Xc216 4c G Firmware Siemens Scalance Xc216eec Firmware Siemens Scalance Xc224 Firmware Siemens Scalance Xc224 4c G \(Eip Def.\) Firmware Siemens Scalance Xc224 4c G Eec Firmware Siemens Scalance Xc224 4c G Firmware Siemens Scalance Xf204 Dna Firmware Siemens Scalance Xf204 Firmware Siemens Scalance Xf204 2ba Dna Firmware Siemens Scalance Xf204 2ba Firmware Siemens Scalance Xp208 \(Ethernet\/Ip\) Firmware Siemens Scalance Xp208 Firmware Siemens Scalance Xp208eec Firmware Siemens Scalance Xp208poe Eec Firmware Siemens Scalance Xp216 \(Ethernet\/Ip\) Firmware Siemens Scalance Xp216 Firmware Siemens Scalance Xp216eec Firmware Siemens Scalance Xp216poe Eec Firmware Siemens Scalance Xr324wg \(24 X Fe\, Ac 230v\) Firmware Siemens Scalance Xr324wg \(24 X Fe\, Dc 24v\) Firmware Siemens Scalance Xr326 2c Poe Wg \(Without Ul\) Firmware Siemens Scalance Xr326 2c Poe Wg Firmware Siemens Scalance Xr328 4c Wg \(24xfe\, 4xge\, 24v\) Firmware Siemens Scalance Xr328 4c Wg \(24xfe\, 4xge\,Dc24v\) Firmware Siemens Scalance Xr328 4c Wg \(24xfe\,4xge\,Ac230v\) Firmware Siemens Scalance Xr328 4c Wg \(28xge\, Ac 230v\) Firmware Siemens Scalance Xr328 4c Wg \(28xge\, Dc 24v\) Firmware Siemens Siplus Net Scalance Xc206 2 Firmware Siemens Siplus Net Scalance Xc206 2sfp Firmware Siemens Siplus Net Scalance Xc208 Firmware Siemens Siplus Net Scalance Xc216 4c Firmware Siemens

References