Authentication bypass by spoofing in Siemens SCALANCE W1748-1 M12
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-290.
Summary
A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0), SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0), SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0), SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0), SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6), SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0), SCALANCE W734-1 RJ45 (USA) (6GK5734-1FX00-0AB6), SCALANCE W738-1 M12 (6GK5738-1GY00-0AA0), SCALANCE W738-1 M12 (6GK5738-1GY00-0AB0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AA0), SCALANCE W748-1 M12 (6GK5748-1GD00-0AB0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0), SCALANCE W748-1 RJ45 (6GK5748-1FC00-0AB0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0), SCALANCE W761-1 RJ45 (6GK5761-1FC00-0AB0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0), SCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0), SCALANCE W774-1 RJ45 (6GK5774-1FX00-0AC0), SCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6), SCALANCE W778-1 M12 (6GK5778-1GY00-0AA0), SCALANCE W778-1 M12 (6GK5778-1GY00-0AB0), SCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0), SCALANCE W778-1 M12 EEC (USA) (6GK5778-1GY00-0TB0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0), SCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AA0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AB0), SCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AA0), SCALANCE W786-2 SFP (6GK5786-2FE00-0AB0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AA0), SCALANCE W786-2IA RJ45 (6GK5786-2HC00-0AB0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AA0), SCALANCE W788-1 M12 (6GK5788-1GD00-0AB0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AA0), SCALANCE W788-1 RJ45 (6GK5788-1FC00-0AB0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AA0), SCALANCE W788-2 M12 (6GK5788-2GD00-0AB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TA0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TB0), SCALANCE W788-2 M12 EEC (6GK5788-2GD00-0TC0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AB0), SCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0), SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0), SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0), SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0), SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0). This CVE refers to Scenario 2 "Abuse the queue for network disruptions" of CVE-2022-47522. Affected devices can be tricked into enabling its power-saving mechanisms for a victim client. This could allow a physically proximate attacker to execute disconnection and denial-of-service attacks.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SCALANCE W1748-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W1748-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W1788-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W1788-2 EEC M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W1788-2 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W1788-2IA M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W721-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W721-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W722-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W722-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W722-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W734-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W734-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W734-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W734-1 RJ45 (USA) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W738-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W738-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W748-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W748-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W748-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W748-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W761-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W761-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W774-1 RJ45 (USA) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W778-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W778-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W778-1 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W778-1 M12 EEC (USA) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2 SFP | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2 SFP | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2IA RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W786-2IA RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-1 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-1 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 M12 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 M12 EEC | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE W788-2 RJ45 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WAM763-1 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WAM766-1 (EU) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WAM766-1 (US) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WAM766-1 EEC (EU) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WAM766-1 EEC (US) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WUM763-1 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WUM763-1 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WUM766-1 (EU) | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE WUM766-1 (US) | all versions | — | No fix listed | CNA |
- SCALANCE W1748-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W1748-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W1788-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W1788-2 EEC M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W1788-2 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W1788-2IA M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W721-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W721-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W722-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W722-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W722-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W734-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W734-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W734-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W734-1 RJ45 (USA) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W738-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W738-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W748-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W748-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W748-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W748-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W761-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W761-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W774-1 RJ45 (USA) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W778-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W778-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W778-1 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W778-1 M12 EEC (USA) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2 SFP VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2 SFP VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2IA RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W786-2IA RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-1 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-1 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 M12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 M12 EEC VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE W788-2 RJ45 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WAM763-1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WAM766-1 (EU) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WAM766-1 (US) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WAM766-1 EEC (EU) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WAM766-1 EEC (US) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WUM763-1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WUM763-1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WUM766-1 (EU) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE WUM766-1 (US) VendorSiemens Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-30190
- 2026-10-03 Alias added: GHSA-x866-v2pc-mx93
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2024-30190 · CVE Program
- CVE-2024-30190 · NVD
- FIRST EPSS
- GHSA-x866-v2pc-mx93 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences