Code injection in Siemens RUGGEDCOM RM1224 LTE EU
Priority MEDIUM 45CWE-94Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), SCALANCE M874-2 (6GK5874-2AA00-2AA2), SCALANCE M874-3 (6GK5874-3AA00-2AA2), SCALANCE M876-3 (6GK5876-3AA02-2BA2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2), SCALANCE M876-4 (6GK5876-4AA10-2BA2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC622-2C (6GK5622-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0), SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0). By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02427 84th percentileScored 2026-11-07
Fix Fixed RUGGEDCOM RM1224 LTE(4G) EU (Siemens): V7.2RUGGEDCOM RM1224 LTE(4G) NAM (Siemens): V7.2+54 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M804PB | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M826-2 SHDSL-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M874-2 | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M874-3 | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 (ROK) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (EU) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (NAM) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE MUM853-1 (EU) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (EU) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (RoW) | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE S615 EEC LAN-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE S615 LAN-Router | before V7.2 | V7.2 | Patch available | CNA |
| Siemens | SCALANCE SC622-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC622-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE SC626-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC626-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE SC632-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC632-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE SC636-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC636-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE SC642-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC642-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE SC646-2C | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SCALANCE SC646-2C | V2.3 to before V3.0 | V3.0 | Patch available | CNA |
| Siemens | SCALANCE WAB762-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM763-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM763-1 (ME) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM763-1 (US) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 (ME) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 (US) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 EEC | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 EEC (ME) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WAM766-1 EEC (US) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUB762-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUB762-1 iFeatures | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM763-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM763-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM763-1 (US) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM763-1 (US) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM766-1 | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM766-1 (ME) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SCALANCE WUM766-1 (USA) | before V3.0.0 | V3.0.0 | Patch available | CNA |
| Siemens | SIMATIC CP 1242-7 V2 | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-7 LTE EU | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-7 LTE US | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-8 IRC | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIMATIC CP 1542SP-1 IRC | V2.0 to before V2.2.28 | V2.2.28 | Patch available | CNA |
| Siemens | SIMATIC CP 1543-1 | before V3.0.22 | V3.0.22 | Patch available | CNA |
| Siemens | SIMATIC CP 1543SP-1 | V2.0 to before V2.2.28 | V2.2.28 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL | V2.0 to before V2.2.28 | V2.2.28 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC | V2.0 to before V2.2.28 | V2.2.28 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL | V2.0 to before V2.2.28 | V2.2.28 | Patch available | CNA |
| Siemens | SIPLUS NET CP 1242-7 V2 | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIPLUS NET CP 1543-1 | before V3.0.22 | V3.0.22 | Patch available | CNA |
| Siemens | SIPLUS S7-1200 CP 1243-1 | before V3.3.46 | V3.3.46 | Patch available | CNA |
| Siemens | SIPLUS S7-1200 CP 1243-1 RAIL | before V3.3.46 | V3.3.46 | Patch available | CNA |
- RUGGEDCOM RM1224 LTE(4G) EU VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- RUGGEDCOM RM1224 LTE(4G) NAM VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M804PB VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M826-2 SHDSL-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M874-2 VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M874-3 VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M876-3 VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M876-3 (ROK) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M876-4 VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M876-4 (EU) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE M876-4 (NAM) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE MUM853-1 (EU) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE MUM856-1 (EU) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE MUM856-1 (RoW) VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE S615 EEC LAN-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE S615 LAN-Router VendorSiemens Affected before V7.2 Fixed in V7.2 Patch available CNA
- SCALANCE SC622-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC622-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE SC626-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC626-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE SC632-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC632-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE SC636-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC636-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE SC642-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC642-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE SC646-2C VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SCALANCE SC646-2C VendorSiemens Affected V2.3 to before V3.0 Fixed in V3.0 Patch available CNA
- SCALANCE WAB762-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM763-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM763-1 (ME) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM763-1 (US) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 (ME) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 (US) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 EEC VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 EEC (ME) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WAM766-1 EEC (US) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUB762-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUB762-1 iFeatures VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM763-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM763-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM763-1 (US) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM763-1 (US) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM766-1 VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM766-1 (ME) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SCALANCE WUM766-1 (USA) VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA
- SIMATIC CP 1242-7 V2 VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIMATIC CP 1243-1 VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIMATIC CP 1243-7 LTE EU VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIMATIC CP 1243-7 LTE US VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIMATIC CP 1243-8 IRC VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIMATIC CP 1542SP-1 IRC VendorSiemens Affected V2.0 to before V2.2.28 Fixed in V2.2.28 Patch available CNA
- SIMATIC CP 1543-1 VendorSiemens Affected before V3.0.22 Fixed in V3.0.22 Patch available CNA
- SIMATIC CP 1543SP-1 VendorSiemens Affected V2.0 to before V2.2.28 Fixed in V2.2.28 Patch available CNA
- SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL VendorSiemens Affected V2.0 to before V2.2.28 Fixed in V2.2.28 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC VendorSiemens Affected V2.0 to before V2.2.28 Fixed in V2.2.28 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL VendorSiemens Affected V2.0 to before V2.2.28 Fixed in V2.2.28 Patch available CNA
- SIPLUS NET CP 1242-7 V2 VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIPLUS NET CP 1543-1 VendorSiemens Affected before V3.0.22 Fixed in V3.0.22 Patch available CNA
- SIPLUS S7-1200 CP 1243-1 VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
- SIPLUS S7-1200 CP 1243-1 RAIL VendorSiemens Affected before V3.3.46 Fixed in V3.3.46 Patch available CNA
CPE configurations NVD · 30
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 20 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:* | before 3.0.22 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:*:*:*:*:*:*:*:* | before 3.0.22 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_1543-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:* Versions before 3.0.22 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:*:*:*:*:*:*:*:* Versions before 3.0.22 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_1543-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) EU (Siemens) Fixed in V7.2
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) NAM (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M804PB (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M826-2 SHDSL-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M874-2 (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M874-3 (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M876-3 (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M876-3 (ROK) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M876-4 (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M876-4 (EU) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE M876-4 (NAM) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE MUM853-1 (EU) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE MUM856-1 (EU) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE MUM856-1 (RoW) (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE S615 EEC LAN-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE S615 LAN-Router (Siemens) Fixed in V7.2
- Fix · CNA SCALANCE SC622-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC622-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE SC626-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC626-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE SC632-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC632-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE SC636-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC636-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE SC642-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC642-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE SC646-2C (Siemens) Fixed in V2.3
- Fix · CNA SCALANCE SC646-2C (Siemens) Fixed in V3.0
- Fix · CNA SCALANCE WAB762-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM763-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM763-1 (ME) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM763-1 (US) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 (ME) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 (US) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 EEC (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 EEC (ME) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WAM766-1 EEC (US) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUB762-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUB762-1 iFeatures (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM763-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM763-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM763-1 (US) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM763-1 (US) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM766-1 (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM766-1 (ME) (Siemens) Fixed in V3.0.0
- Fix · CNA SCALANCE WUM766-1 (USA) (Siemens) Fixed in V3.0.0
- Fix · CNA SIMATIC CP 1242-7 V2 (Siemens) Fixed in V3.3.46
- Fix · CNA SIMATIC CP 1243-1 (Siemens) Fixed in V3.3.46
- Fix · CNA SIMATIC CP 1243-7 LTE EU (Siemens) Fixed in V3.3.46
- Fix · CNA SIMATIC CP 1243-7 LTE US (Siemens) Fixed in V3.3.46
- Fix · CNA SIMATIC CP 1243-8 IRC (Siemens) Fixed in V3.3.46
- Fix · CNA SIMATIC CP 1542SP-1 IRC (Siemens) Fixed in V2.2.28
- Fix · CNA SIMATIC CP 1543-1 (Siemens) Fixed in V3.0.22
- Fix · CNA SIMATIC CP 1543SP-1 (Siemens) Fixed in V2.2.28
- Fix · CNA SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (Siemens) Fixed in V2.2.28
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC (Siemens) Fixed in V2.2.28
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (Siemens) Fixed in V2.2.28
- Fix · CNA SIPLUS NET CP 1242-7 V2 (Siemens) Fixed in V3.3.46
- Fix · CNA SIPLUS NET CP 1543-1 (Siemens) Fixed in V3.0.22
- Fix · CNA SIPLUS S7-1200 CP 1243-1 (Siemens) Fixed in V3.3.46
- Fix · CNA SIPLUS S7-1200 CP 1243-1 RAIL (Siemens) Fixed in V3.3.46
Timeline
- 2026-10-02 Threatist record created from CVE-2022-34821
- 2026-10-03 Alias added: GHSA-xx9f-xg2j-c647
References
More Siemens Simatic Cp 1242-7 V2 Firmware vulnerabilities
- TI-2022-15626 Heap-based buffer overflow in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1CRITICAL 10.0
- TI-2022-15627 Command injection in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1CRITICAL 9.8
- TI-2022-21502 Resource allocation without limits in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1HIGH 7.5
- TI-2022-21471 Use after free in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1HIGH 7.5
- TI-2022-21501 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All… CVSS 3.1HIGH 7.5
- TI-2023-19764 Memory leak in Siemens SIMATIC CP 1242-7 V2 CVSS 4.0HIGH 8.7
Sources
- CVE-2022-34821 · CVE Program
- CVE-2022-34821 · NVD
- FIRST EPSS
- GHSA-xx9f-xg2j-c647 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences