Files
vuln-cve/data/2024/39xxx/CVE-2024-39675.json
T

929 lines
37 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-39675",
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"state": "PUBLISHED",
"assignerShortName": "siemens",
"dateReserved": "2024-06-27T11:41:41.875Z",
"datePublished": "2024-07-09T12:05:18.310Z",
"dateUpdated": "2025-08-27T20:42:56.043Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens",
"dateUpdated": "2024-07-09T12:05:18.310Z"
},
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.10), RUGGEDCOM RP110 (All versions < V4.3.10), RUGGEDCOM RP110NC (All versions < V4.3.10), RUGGEDCOM RS400 (All versions < V4.3.10), RUGGEDCOM RS400NC (All versions < V4.3.10), RUGGEDCOM RS401 (All versions < V4.3.10), RUGGEDCOM RS401NC (All versions < V4.3.10), RUGGEDCOM RS416 (All versions < V4.3.10), RUGGEDCOM RS416NC (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416P (All versions < V4.3.10), RUGGEDCOM RS416PNC (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS910 (All versions < V4.3.10), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910LNC (All versions), RUGGEDCOM RS910NC (All versions < V4.3.10), RUGGEDCOM RS910W (All versions < V4.3.10), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920LNC (All versions), RUGGEDCOM RS920W (All versions). In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability."
}
],
"affected": [
{
"vendor": "Siemens",
"product": "RUGGEDCOM RMC30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RMC30NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RP110",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RP110NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS400",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS400NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS401",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS401NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416NCv2 V4.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416NCv2 V5.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416P",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416PNC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416PNCv2 V4.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416PNCv2 V5.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416Pv2 V4.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416Pv2 V5.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416v2 V4.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS416v2 V5.X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS910",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS910L",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS910LNC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS910NC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS910W",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS920L",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS920LNC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RS920W",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"baseScore": 8.8,
"baseSeverity": "HIGH"
}
},
{
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"baseScore": 8.7,
"baseSeverity": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-497",
"description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-170375.html"
}
]
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2024-39675",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-07-09T13:14:06.893152Z"
}
}
}
],
"affected": [
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rmc30:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rmc30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rmc30nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rmc30nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rp110:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rp110",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rp110nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rp110nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs400:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs400",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs400nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs400nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs401:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs401",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs401nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs401nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416ncv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416ncv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416p:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416p",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416pnc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416pnc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416pncv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416pncv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416pv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416pv2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416v2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs416v2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "5.9.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs910:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs910",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs910l:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs910l",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs920l:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs920l",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs910lnc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs910lnc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs910nc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs910nc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs920lnc:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs920lnc",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs910w:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs910w",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.3.10",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:siemens:ruggedcom_ros_rs920w:*:*:*:*:*:*:*:*"
],
"vendor": "siemens",
"product": "ruggedcom_ros_rs920w",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-08-27T20:42:56.043Z"
}
},
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-02T04:26:16.017Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-170375.html",
"tags": [
"x_transferred"
]
}
]
}
]
}
}