Skip to main content
← All vulnerabilities
CVE-2024-50557

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V8.2
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Siemens RUGGEDCOM RM1224 LTE(4G) EU

    fixed in V8.2

  • Siemens RUGGEDCOM RM1224 LTE(4G) NAM

    fixed in V8.2

  • Siemens SCALANCE M804PB

    fixed in V8.2

  • Siemens SCALANCE M812-1 ADSL-Router

    fixed in V8.2

  • Siemens SCALANCE M812-1 ADSL-Router

    fixed in V8.2

  • Siemens SCALANCE M816-1 ADSL-Router

    fixed in V8.2

  • Siemens SCALANCE M816-1 ADSL-Router

    fixed in V8.2

  • Siemens SCALANCE M826-2 SHDSL-Router

    fixed in V8.2

  • Siemens SCALANCE M874-2

    fixed in V8.2

  • Siemens SCALANCE M874-3

    fixed in V8.2

  • Siemens SCALANCE M874-3 3G-Router (CN)

    fixed in V8.2

  • Siemens SCALANCE M876-3

    fixed in V8.2

  • Siemens SCALANCE M876-3 (ROK)

    fixed in V8.2

  • Siemens SCALANCE M876-4

    fixed in V8.2

  • Siemens SCALANCE M876-4 (EU)

    fixed in V8.2

  • Siemens SCALANCE M876-4 (NAM)

    fixed in V8.2

  • Siemens SCALANCE MUM853-1 (A1)

    fixed in V8.2

  • Siemens SCALANCE MUM853-1 (B1)

    fixed in V8.2

  • Siemens SCALANCE MUM853-1 (EU)

    fixed in V8.2

  • Siemens SCALANCE MUM856-1 (A1)

    fixed in V8.2

  • Siemens SCALANCE MUM856-1 (B1)

    fixed in V8.2

  • Siemens SCALANCE MUM856-1 (CN)

    fixed in V8.2

  • Siemens SCALANCE MUM856-1 (EU)

    fixed in V8.2

  • Siemens SCALANCE MUM856-1 (RoW)

    fixed in V8.2

  • Siemens SCALANCE S615 EEC LAN-Router

    fixed in V8.2

  • Siemens SCALANCE S615 LAN-Router

    fixed in V8.2

References 1

cert-portal.siemens.com