Path traversal in Siemens RUGGEDCOM RM1224 LTE EU
Priority LOW 23CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate the filenames of the certificate. This could allow an authenticated remote attacker to append arbitrary values which will lead to compromise of integrity of the system.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00289 21st percentileScored 2026-11-07
Fix Fixed RUGGEDCOM RM1224 LTE(4G) EU (Siemens): V8.2RUGGEDCOM RM1224 LTE(4G) NAM (Siemens): V8.2+22 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M804PB | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M812-1 ADSL-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M816-1 ADSL-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M826-2 SHDSL-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M874-2 | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M874-3 | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M874-3 3G-Router (CN) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M876-3 (ROK) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (EU) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE M876-4 (NAM) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM853-1 (A1) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM853-1 (B1) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM853-1 (EU) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (A1) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (B1) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (CN) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (EU) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE MUM856-1 (RoW) | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE S615 EEC LAN-Router | before V8.2 | V8.2 | Patch available | CNA |
| Siemens | SCALANCE S615 LAN-Router | before V8.2 | V8.2 | Patch available | CNA |
- RUGGEDCOM RM1224 LTE(4G) EU VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- RUGGEDCOM RM1224 LTE(4G) NAM VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M804PB VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M812-1 ADSL-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M816-1 ADSL-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M826-2 SHDSL-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M874-2 VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M874-3 VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M874-3 3G-Router (CN) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M876-3 VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M876-3 (ROK) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M876-4 VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M876-4 (EU) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE M876-4 (NAM) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM853-1 (A1) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM853-1 (B1) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM853-1 (EU) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM856-1 (A1) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM856-1 (B1) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM856-1 (CN) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM856-1 (EU) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE MUM856-1 (RoW) VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE S615 EEC LAN-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
- SCALANCE S615 LAN-Router VendorSiemens Affected before V8.2 Fixed in V8.2 Patch available CNA
CPE configurations NVD · 52
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:ruggedcom_rm1224_lte\(4g\)_nam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m804pb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m812-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m812-1_\(annex_a\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m812-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m812-1_\(annex_b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 42 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m826-2_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m826-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m874-3_\(cn\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m874-3_\(cn\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s615_eec_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s615_eec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* | before 8.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:scalance_m816-1_\(annex_a\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m816-1_\(annex_a\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m816-1_\(annex_b\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m816-1_\(annex_b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m826-2_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m826-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m874-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m874-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m874-3_\(cn\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m874-3_\(cn\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m876-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m876-3_\(rok\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m876-3_\(rok\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m876-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m876-4_\(eu\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m876-4_\(eu\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_m876-4_\(nam\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_m876-4_\(nam\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum853-1_\(a1\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum853-1_\(a1\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum853-1_\(b1\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum853-1_\(b1\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum853-1_\(eu\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum853-1_\(eu\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum856-1_\(a1\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum856-1_\(a1\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum856-1_\(b1\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum856-1_\(b1\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum856-1_\(cn\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum856-1_\(cn\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum856-1_\(eu\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum856-1_\(eu\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_mum856-1_\(row\)_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_mum856-1_\(row\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s615_eec_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s615_eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) EU (Siemens) Fixed in V8.2
- Fix · CNA RUGGEDCOM RM1224 LTE(4G) NAM (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M804PB (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M812-1 ADSL-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M816-1 ADSL-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M826-2 SHDSL-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M874-2 (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M874-3 (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M874-3 3G-Router (CN) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M876-3 (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M876-3 (ROK) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M876-4 (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M876-4 (EU) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE M876-4 (NAM) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM853-1 (A1) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM853-1 (B1) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM853-1 (EU) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM856-1 (A1) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM856-1 (B1) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM856-1 (CN) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM856-1 (EU) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE MUM856-1 (RoW) (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE S615 EEC LAN-Router (Siemens) Fixed in V8.2
- Fix · CNA SCALANCE S615 LAN-Router (Siemens) Fixed in V8.2
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM and 22 more products V8.2
6 records Highest priority Priority MEDIUM 2 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2024-33986 Improper input validation in Siemens RUGGEDCOM RM1224 LTE EUPriority MEDIUM 47
- TI-2024-34001 Injection in Siemens RUGGEDCOM RM1224 LTE EUPriority MEDIUM 40
- TI-2024-33987 Improper access control in Siemens RUGGEDCOM RM1224 LTE EUPriority LOW 24
Timeline
- 2026-10-02 Threatist record created from CVE-2024-50559
- 2026-10-03 Alias added: GHSA-q9qw-6hf7-48wg
References
More Siemens Ruggedcom Rm1224 Lte(4g) Eu Firmware vulnerabilities
- TI-2024-02335 Unbounded memory growth with session handling in TLSv1.3 CVSS 3.1MEDIUM 5.9
- TI-2024-33986 Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 8.6
- TI-2024-27996 Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 8.6
- TI-2024-34001 Injection in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 8.6
- TI-2024-27997 A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)… CVSS 4.0HIGH 7.3
- TI-2024-27998 Sensitive information in log files in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 7.1
Sources
- CVE-2024-50559 · CVE Program
- CVE-2024-50559 · NVD
- FIRST EPSS
- GHSA-q9qw-6hf7-48wg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences