OS command injection in Siemens RUGGEDCOM RM1224 LTE EU
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M804PB | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M826-2 SHDSL-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M874-2 | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M874-3 | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 (ROK) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (EU) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (NAM) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE MUM853-1 (EU) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (EU) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (RoW) | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE S615 EEC LAN-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
| Siemens | SCALANCE S615 LAN-Router | before V7.2.2 | V7.2.2 | Patch available | CNA |
- RUGGEDCOM RM1224 LTE(4G) EU VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- RUGGEDCOM RM1224 LTE(4G) NAM VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M804PB VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M826-2 SHDSL-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M874-2 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M874-3 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M876-3 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M876-3 (ROK) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M876-4 VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M876-4 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE M876-4 (NAM) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE MUM853-1 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE MUM856-1 (EU) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE MUM856-1 (RoW) VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE S615 EEC LAN-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
- SCALANCE S615 LAN-Router VendorSiemens Affected before V7.2.2 Fixed in V7.2.2 Patch available CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:6gk6108-4am00-2ba2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk6108-4am00-2ba2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk6108-4am00-2da2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk6108-4am00-2da2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5804-0ap00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5804-0ap00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5812-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5812-1aa00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5812-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5812-1ba00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:6gk6108-4am00-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk6108-4am00-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk6108-4am00-2da2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk6108-4am00-2da2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5804-0ap00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5804-0ap00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5812-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5812-1aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5812-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5812-1ba00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:6gk5816-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5816-1aa00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5816-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5816-1ba00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5826-2ab00-2ab2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5826-2ab00-2ab2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5874-2aa00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5874-2aa00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5874-3aa00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5874-3aa00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5876-3aa02-2ba2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5876-3aa02-2ba2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5876-3aa02-2ea2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5876-3aa02-2ea2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5876-4aa10-2ba2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5876-4aa10-2ba2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5876-4aa00-2ba2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5876-4aa00-2ba2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5876-4aa00-2da2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5876-4aa00-2da2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5853-2ea00-2da1_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5853-2ea00-2da1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5856-2ea00-3da1_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5856-2ea00-3da1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5856-2ea00-3aa1_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5856-2ea00-3aa1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5615-0aa00-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5615-0aa00-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk5615-0aa01-2aa2_firmware:*:*:*:*:*:*:*:* | before 7.2.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk5615-0aa01-2aa2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:6gk5816-1aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5816-1aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5816-1ba00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5816-1ba00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5826-2ab00-2ab2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5826-2ab00-2ab2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5874-2aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5874-2aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5874-3aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5874-3aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5876-3aa02-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5876-3aa02-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5876-3aa02-2ea2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5876-3aa02-2ea2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5876-4aa10-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5876-4aa10-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5876-4aa00-2ba2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5876-4aa00-2ba2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5876-4aa00-2da2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5876-4aa00-2da2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5853-2ea00-2da1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5853-2ea00-2da1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5856-2ea00-3da1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5856-2ea00-3da1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5856-2ea00-3aa1_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5856-2ea00-3aa1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5615-0aa00-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5615-0aa00-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk5615-0aa01-2aa2_firmware:*:*:*:*:*:*:*:* Versions before 7.2.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk5615-0aa01-2aa2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) EU (Siemens) Fixed in V7.2.2
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) NAM (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M804PB (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M826-2 SHDSL-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M874-2 (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M874-3 (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M876-3 (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M876-3 (ROK) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M876-4 (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M876-4 (EU) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE M876-4 (NAM) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE MUM853-1 (EU) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE MUM856-1 (EU) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE MUM856-1 (RoW) (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE S615 EEC LAN-Router (Siemens) Fixed in V7.2.2
- Fix · CNA SCALANCE S615 LAN-Router (Siemens) Fixed in V7.2.2
Timeline
- 2026-10-02 Threatist record created from CVE-2023-49692
- 2026-10-03 Alias added: GHSA-7p99-x6w8-v88h
- 2026-11-04 EPSS moved to the 50th–90th percentile
References
More Siemens 6gk5615-0aa00-2aa2 Firmware vulnerabilities
- TI-2021-18520 The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted… CVSS 3.1HIGH 7.5
- TI-2023-27128 OS command injection in Siemens RUGGEDCOM RM1224 LTE EU CVSS 3.1HIGH 7.2
Sources
- CVE-2023-49692 · CVE Program
- CVE-2023-49692 · NVD
- FIRST EPSS
- GHSA-7p99-x6w8-v88h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences