Skip to main content
← All vulnerabilities
CVE-2025-23384

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NA

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V8.2.1, V3.2
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2.1), SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) (All versions < V8.2.1), SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2.1), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V3.2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V3.2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V3.2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V3.2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V3.2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V3.2). Affected devices improperly validate usernames during OpenVPN authentication. This could allow an attacker to get partial invalid usernames accepted by the server.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Siemens RUGGEDCOM RM1224 LTE(4G) EU

    fixed in V8.2.1

  • Siemens RUGGEDCOM RM1224 LTE(4G) NAM

    fixed in V8.2.1

  • Siemens SCALANCE M804PB

    fixed in V8.2.1

  • Siemens SCALANCE M812-1 ADSL-Router family

    fixed in V8.2.1

  • Siemens SCALANCE M816-1 ADSL-Router family

    fixed in V8.2.1

  • Siemens SCALANCE M826-2 SHDSL-Router

    fixed in V8.2.1

  • Siemens SCALANCE M874-2

    fixed in V8.2.1

  • Siemens SCALANCE M874-3

    fixed in V8.2.1

  • Siemens SCALANCE M874-3 3G-Router (CN)

    fixed in V8.2.1

  • Siemens SCALANCE M876-3

    fixed in V8.2.1

  • Siemens SCALANCE M876-3 (ROK)

    fixed in V8.2.1

  • Siemens SCALANCE M876-4

    fixed in V8.2.1

  • Siemens SCALANCE M876-4 (EU)

    fixed in V8.2.1

  • Siemens SCALANCE M876-4 (NAM)

    fixed in V8.2.1

  • Siemens SCALANCE MUB852-1 (A1)

    fixed in V8.2.1

  • Siemens SCALANCE MUB852-1 (B1)

    fixed in V8.2.1

  • Siemens SCALANCE MUM853-1 (A1)

    fixed in V8.2.1

  • Siemens SCALANCE MUM853-1 (B1)

    fixed in V8.2.1

  • Siemens SCALANCE MUM853-1 (EU)

    fixed in V8.2.1

  • Siemens SCALANCE MUM856-1 (A1)

    fixed in V8.2.1

  • Siemens SCALANCE MUM856-1 (B1)

    fixed in V8.2.1

  • Siemens SCALANCE MUM856-1 (CN)

    fixed in V8.2.1

  • Siemens SCALANCE MUM856-1 (EU)

    fixed in V8.2.1

  • Siemens SCALANCE MUM856-1 (RoW)

    fixed in V8.2.1

  • Siemens SCALANCE S615 EEC LAN-Router

    fixed in V8.2.1

  • Siemens SCALANCE S615 LAN-Router

    fixed in V8.2.1

  • Siemens SCALANCE SC622-2C

    fixed in V3.2

  • Siemens SCALANCE SC626-2C

    fixed in V3.2

  • Siemens SCALANCE SC632-2C

    fixed in V3.2

  • Siemens SCALANCE SC636-2C

    fixed in V3.2

  • Siemens SCALANCE SC642-2C

    fixed in V3.2

  • Siemens SCALANCE SC646-2C

    fixed in V3.2

References 1

cert-portal.siemens.com