Files
vuln-cve/data/2024/41xxx/CVE-2024-41976.json
T

797 lines
33 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-41976",
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"state": "PUBLISHED",
"assignerShortName": "siemens",
"dateReserved": "2024-07-25T11:00:11.939Z",
"datePublished": "2024-08-13T07:54:35.837Z",
"dateUpdated": "2024-08-14T18:17:16.011Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens",
"dateUpdated": "2024-08-13T07:54:35.837Z"
},
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices do not properly validate input in specific VPN configuration fields. This could allow an authenticated remote attacker to execute arbitrary code on the device."
}
],
"affected": [
{
"vendor": "Siemens",
"product": "RUGGEDCOM RM1224 LTE(4G) EU",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM RM1224 LTE(4G) NAM",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M804PB",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M812-1 ADSL-Router family",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M816-1 ADSL-Router family",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M826-2 SHDSL-Router",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M874-2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M874-3",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M874-3 3G-Router (CN)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M876-3",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M876-3 (ROK)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M876-4",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M876-4 (EU)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M876-4 (NAM)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM853-1 (A1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM853-1 (B1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM853-1 (EU)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM856-1 (A1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM856-1 (B1)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM856-1 (CN)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM856-1 (EU)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE MUM856-1 (RoW)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE S615 EEC LAN-Router",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE S615 LAN-Router",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V8.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C",
"baseScore": 7.2,
"baseSeverity": "HIGH"
}
},
{
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"baseScore": 8.6,
"baseSeverity": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-087301.html"
}
]
},
"adp": [
{
"affected": [
{
"vendor": "siemens",
"product": "ruggedcom_rm1224_lte\\(4g\\)_eu",
"cpes": [
"cpe:2.3:h:siemens:ruggedcom_rm1224_lte\\(4g\\)_eu:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "ruggedcom_rm1224_lte\\(4g\\)_nam",
"cpes": [
"cpe:2.3:h:siemens:ruggedcom_rm1224_lte\\(4g\\)_nam:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m804pb",
"cpes": [
"cpe:2.3:h:siemens:scalance_m804pb:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m812-1_adsl-router",
"cpes": [
"cpe:2.3:h:siemens:scalance_m812-1_adsl-router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m816-1_adsl-router",
"cpes": [
"cpe:2.3:h:siemens:scalance_m816-1_adsl-router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m826-2_shdsl-router",
"cpes": [
"cpe:2.3:h:siemens:scalance_m826-2_shdsl-router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m874-2",
"cpes": [
"cpe:2.3:h:siemens:scalance_m874-2:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m874-3",
"cpes": [
"cpe:2.3:h:siemens:scalance_m874-3:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m874-3_3g-router_\\(cn\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_m874-3_3g-router_\\(cn\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m876-3",
"cpes": [
"cpe:2.3:h:siemens:scalance_m876-3:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m876-3_\\(rok\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_m876-3_\\(rok\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m876-4",
"cpes": [
"cpe:2.3:h:siemens:scalance_m876-4:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m876-4_\\(eu\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_m876-4_\\(eu\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_m876-4_\\(nam\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_m876-4_\\(nam\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum853-1_\\(a1\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum853-1_\\(a1\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum853-1_\\(b1\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum853-1_\\(b1\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum853-1_\\(eu\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum853-1_\\(eu\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum856-1_\\(a1\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum856-1_\\(a1\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum856-1_\\(b1\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum856-1_\\(b1\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum856-1_\\(cn\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum856-1_\\(cn\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum856-1_\\(eu\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum856-1_\\(eu\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_mum856-1_\\(row\\)",
"cpes": [
"cpe:2.3:h:siemens:scalance_mum856-1_\\(row\\):*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_s615_eec_lan-router",
"cpes": [
"cpe:2.3:h:siemens:scalance_s615_eec_lan-router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
},
{
"vendor": "siemens",
"product": "scalance_s615_lan-router",
"cpes": [
"cpe:2.3:h:siemens:scalance_s615_lan-router:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "v8.1",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-08-14T17:50:04.994530Z",
"id": "CVE-2024-41976",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-08-14T18:17:16.011Z"
}
}
]
}
}