Skip to main content

Scalance Xc206 2G Poe Firmware CVE-2023-44317

HIGH
Acceptance of Extraneous Untrusted Data With Trusted Data (CWE-349)
2023-11-14 productcert@siemens.com
RCE Siemens Scalance Xc206 2G Poe Firmware Scalance Xc206 2Sfp Eec Firmware Scalance Xc206 2Sfp G Firmware Scalance Xc206 2Sfp G Eec Firmware Scalance Xc208 Firmware Scalance Xc208Eec Firmware Scalance Xc208G Firmware Scalance Xc208G Eec Firmware Scalance Xc208G Poe Firmware Scalance Xc216 Firmware Scalance Xc216 4C Firmware Scalance Xc216 4C G Firmware Scalance Xc216 4C G Eec Firmware Scalance Xc216Eec Firmware Scalance Xc224 Firmware Scalance Xc224 4C G Firmware Scalance Xc224 4C G Eec Firmware Scalance Xf204 2Ba Dna Firmware Scalance Xp208 Firmware Scalance Xp208Eec Firmware Scalance Xp208Poe Eec Firmware Scalance Xp216 Firmware Scalance Xp216Eec Firmware Scalance Xp216Poe Eec Firmware Scalance Xr326 2C Poe Wg Firmware Scalance Xc206 2Sfp Firmware Scalance Xf204 Firmware Scalance Xf204 Dna Firmware Scalance Xc216 3G Poe Firmware Scalance Xf204 2Ba Firmware Siplus Net Scalance Xc206 2 Firmware Siplus Net Scalance Xc206 2Sfp Firmware Siplus Net Scalance Xc208 Firmware Siplus Net Scalance Xc216 4C Firmware Scalance Xb208 E Ip Firmware Scalance Xb208 Pn Firmware Scalance Xb216 E Ip Firmware Scalance Xb216 Pn Firmware Scalance Xc206 2 Sc Firmware Scalance Xc206 2 St Bfoc Firmware Scalance Xc206 2G Poe 54 V Dc Firmware Scalance Xc206 2G Poe Eec 54 V Dc Firmware Scalance Xc206 2Sfp G Eip Def Firmware Scalance Xc208G Eip Def Firmware Scalance Xc208G Poe 54 V Dc Firmware Scalance Xc216 3G Poe 54 V Dc Firmware Scalance Xc216 4C G Eip Def Firmware Scalance Xc224 4C G Eip Def Firmware Scalance Xp208 Ethernet Ip Firmware Scalance Xp216 Ethernet Ip Firmware Scalance Xr326 2C Poe Wg Without Ul Firmware Scalance Xb205 3 Sc Pn Firmware Scalance Xb205 3 St E Ip Firmware Scalance Xb205 3 St Pn Firmware Scalance Xb205 3Ld Sc E Ip Firmware Scalance Xb205 3Ld Sc Pn Firmware Scalance Xb213 3 Sc E Ip Firmware Scalance Xb213 3 Sc Pn Firmware Scalance Xb213 3 St E Ip Firmware Scalance Xb213 3 St Pn Firmware Scalance Xb213 3Ld Sc E Ip Firmware Scalance Xb213 3Ld Sc Pn Firmware Scalance Xr324Wg 24 X Fe Ac 230V Firmware Scalance Xr324Wg 24 X Fe Dc 24V Firmware Scalance Xr328 4C Wg 24Xfe 4Xge 24V Firmware Scalance Xr328 4C Wg 24Xfe 4Xge Dc24V Firmware Scalance Xr328 4C Wg 24Xfe 4Xge Ac230V Firmware Scalance Xr328 4C Wg 28Xge Ac 230V Firmware Scalance Xr328 4C Wg 28Xge Dc 24V Firmware
8.6
CVSS 4.0 · Vendor: siemens
Share

Severity by source

Vendor (siemens) PRIMARY
8.6 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (siemens) · only source for this CVE.

CVSS VectorVendor: siemens

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 11:15 cve.org
HIGH 8.6

DescriptionCVE.org

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device.

AnalysisAI

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-349. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device. Affected products include: Siemens Scalance Xb208 \(E\/Ip\) Firmware, Siemens Scalance Xb208 \(Pn\) Firmware, Siemens Scalance Xb216 \(E\/Ip\) Firmware, Siemens Scalance Xb216 \(Pn\) Firmware, Siemens Scalance Xc206-2 \(Sc\) Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Scalance Xc206 2G Poe Firmware

View all
CVE-2022-36323 CRITICAL
9.1 Aug 10

Affected devices do not properly sanitize an input field. Rated critical severity (CVSS 9.1), this vulnerability is remo
CVE-2022-36324 HIGH
7.5 Aug 10

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. Rated high severity (CVSS 7.5), this vu
CVE-2022-36325 MEDIUM
6.8 Aug 10

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. Rated medium seve
CVE-2022-46140 HIGH
7.1 Dec 13

Affected devices use a weak encryption scheme to encrypt the debug zip file. Rated high severity (CVSS 7.1), this vulner
CVE-2022-46142 MEDIUM
5.2 Dec 13

Affected devices store the CLI user passwords encrypted in flash memory. Rated medium severity (CVSS 5.2), this vulnerab
CVE-2022-46143 MEDIUM
5.1 Dec 13

Affected devices do not check the TFTP blocksize correctly. Rated medium severity (CVSS 5.1), this vulnerability is remo

Same weakness CWE-349 – Acceptance of Extraneous Untrusted Data With Trusted Data

View all
CVE-2019-9535 CRITICAL POC
9.8
CVE-2020-8023 HIGH POC
7.8
CVE-2026-74916 MEDIUM POC
6.5
CVE-2024-42483 MEDIUM POC
6.5
CVE-2026-41120 CRITICAL
9.8
CVE-2023-51655 CRITICAL
9.8
CVE-2018-1131 HIGH
8.8
CVE-2026-32162 HIGH
8.4

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2023-3519 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Share

CVE-2023-44317 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy