Read the docs
TI-2023-27129 Aliases CVE-2023-49692GHSA-7p99-x6w8-v88h

OS command injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 33CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established.

Why it matters now

EPSS 0.00623 50th percentileScored 2026-11-07
Fix Fixed RUGGEDCOM RM1224 LTE(4G) EU (Siemens): V7.2.2RUGGEDCOM RM1224 LTE(4G) NAM (Siemens): V7.2.2+16 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensRUGGEDCOM RM1224 LTE(4G) EUbefore V7.2.2V7.2.2Patch availableCNA
SiemensRUGGEDCOM RM1224 LTE(4G) NAMbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M804PBbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M812-1 ADSL-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M812-1 ADSL-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M816-1 ADSL-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M816-1 ADSL-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M826-2 SHDSL-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M874-2before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M874-3before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M876-3before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M876-3 (ROK)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M876-4before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M876-4 (EU)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE M876-4 (NAM)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE MUM853-1 (EU)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE MUM856-1 (EU)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE MUM856-1 (RoW)before V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE S615 EEC LAN-Routerbefore V7.2.2V7.2.2Patch availableCNA
SiemensSCALANCE S615 LAN-Routerbefore V7.2.2V7.2.2Patch availableCNA
  • RUGGEDCOM RM1224 LTE(4G) EU VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • RUGGEDCOM RM1224 LTE(4G) NAM VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M804PB VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M826-2 SHDSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M874-2 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M874-3 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M876-3 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M876-3 (ROK) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M876-4 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M876-4 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE M876-4 (NAM) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE MUM853-1 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE MUM856-1 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE MUM856-1 (RoW) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE S615 EEC LAN-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
  • SCALANCE S615 LAN-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:o:siemens:6gk6108-4am00-2ba2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk6108-4am00-2ba2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk6108-4am00-2da2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk6108-4am00-2da2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5804-0ap00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5804-0ap00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5812-1aa00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5812-1aa00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5812-1ba00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5812-1ba00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:6gk6108-4am00-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk6108-4am00-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk6108-4am00-2da2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk6108-4am00-2da2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5804-0ap00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5804-0ap00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5812-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5812-1aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5812-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5812-1ba00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:6gk5816-1aa00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5816-1aa00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5816-1ba00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5816-1ba00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5826-2ab00-2ab2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5826-2ab00-2ab2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5874-2aa00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5874-2aa00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5874-3aa00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5874-3aa00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5876-3aa02-2ba2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5876-3aa02-2ba2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5876-3aa02-2ea2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5876-3aa02-2ea2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5876-4aa10-2ba2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5876-4aa10-2ba2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5876-4aa00-2ba2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5876-4aa00-2ba2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5876-4aa00-2da2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5876-4aa00-2da2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5853-2ea00-2da1_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5853-2ea00-2da1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5856-2ea00-3da1_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5856-2ea00-3da1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5856-2ea00-3aa1_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5856-2ea00-3aa1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5615-0aa00-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5615-0aa00-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:6gk5615-0aa01-2aa2_firmware:*:*:*:*:*:*:*:*before 7.2.2VulnerableSiemens
cpe:2.3:h:siemens:6gk5615-0aa01-2aa2:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:6gk5816-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5816-1aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5816-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5816-1ba00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5826-2ab00-2ab2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5826-2ab00-2ab2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5874-2aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5874-2aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5874-3aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5874-3aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5876-3aa02-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5876-3aa02-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5876-3aa02-2ea2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5876-3aa02-2ea2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5876-4aa10-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5876-4aa10-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5876-4aa00-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5876-4aa00-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5876-4aa00-2da2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5876-4aa00-2da2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5853-2ea00-2da1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5853-2ea00-2da1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5856-2ea00-3da1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5856-2ea00-3da1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5856-2ea00-3aa1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5856-2ea00-3aa1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5615-0aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5615-0aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:6gk5615-0aa01-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:6gk5615-0aa01-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA RUGGEDCOM RM1224 LTE(4G) EU (Siemens) Fixed in V7.2.2
  • Fix · CNA RUGGEDCOM RM1224 LTE(4G) NAM (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M804PB (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M826-2 SHDSL-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M874-2 (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M874-3 (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M876-3 (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M876-3 (ROK) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M876-4 (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M876-4 (EU) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE M876-4 (NAM) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE MUM853-1 (EU) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE MUM856-1 (EU) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE MUM856-1 (RoW) (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE S615 EEC LAN-Router (Siemens) Fixed in V7.2.2
  • Fix · CNA SCALANCE S615 LAN-Router (Siemens) Fixed in V7.2.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-49692
  2. 2026-10-03 Alias added: GHSA-7p99-x6w8-v88h
  3. 2026-11-04 EPSS moved to the 50th–90th percentile

References

  • TI-2021-18520 The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted… CVSS 3.1HIGH 7.5
  • TI-2023-27128 OS command injection in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1HIGH 7.2

Sources