Read the docs
TI-2025-17153 Aliases CVE-2025-23384GHSA-9rhp-86gw-chqm

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority LOW 28CWE-187Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.2.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2.1), SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) (All versions < V8.2.1), SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2.1), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V3.2), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versions < V3.2), SCALANCE SC632-2C (6GK5632-2GS00-2AC2) (All versions < V3.2), SCALANCE SC636-2C (6GK5636-2GS00-2AC2) (All versions < V3.2), SCALANCE SC642-2C (6GK5642-2GS00-2AC2) (All versions < V3.2), SCALANCE SC646-2C (6GK5646-2GS00-2AC2) (All versions < V3.2). Affected devices improperly validate usernames during OpenVPN authentication. This could allow an attacker to get partial invalid usernames accepted by the server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00278 20th percentileScored 2026-11-07
Fix Fixed RUGGEDCOM RM1224 LTE(4G) EU (Siemens): V8.2.1RUGGEDCOM RM1224 LTE(4G) NAM (Siemens): V8.2.1+30 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensRUGGEDCOM RM1224 LTE(4G) EUbefore V8.2.1V8.2.1Patch availableCNA
SiemensRUGGEDCOM RM1224 LTE(4G) NAMbefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M804PBbefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M812-1 ADSL-Router familybefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M816-1 ADSL-Router familybefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M826-2 SHDSL-Routerbefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M874-2before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M874-3before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M874-3 3G-Router (CN)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M876-3before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M876-3 (ROK)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M876-4before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M876-4 (EU)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE M876-4 (NAM)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUB852-1 (A1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUB852-1 (B1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM853-1 (A1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM853-1 (B1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM853-1 (EU)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM856-1 (A1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM856-1 (B1)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM856-1 (CN)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM856-1 (EU)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE MUM856-1 (RoW)before V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE S615 EEC LAN-Routerbefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE S615 LAN-Routerbefore V8.2.1V8.2.1Patch availableCNA
SiemensSCALANCE SC622-2Cbefore V3.2V3.2Patch availableCNA
SiemensSCALANCE SC626-2Cbefore V3.2V3.2Patch availableCNA
SiemensSCALANCE SC632-2Cbefore V3.2V3.2Patch availableCNA
SiemensSCALANCE SC636-2Cbefore V3.2V3.2Patch availableCNA
SiemensSCALANCE SC642-2Cbefore V3.2V3.2Patch availableCNA
SiemensSCALANCE SC646-2Cbefore V3.2V3.2Patch availableCNA
  • RUGGEDCOM RM1224 LTE(4G) EU VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • RUGGEDCOM RM1224 LTE(4G) NAM VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M804PB VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M812-1 ADSL-Router family VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M816-1 ADSL-Router family VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M826-2 SHDSL-Router VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M874-2 VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M874-3 VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M874-3 3G-Router (CN) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M876-3 VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M876-3 (ROK) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M876-4 VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M876-4 (EU) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE M876-4 (NAM) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUB852-1 (A1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUB852-1 (B1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM853-1 (A1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM853-1 (B1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM853-1 (EU) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM856-1 (A1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM856-1 (B1) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM856-1 (CN) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM856-1 (EU) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE MUM856-1 (RoW) VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE S615 EEC LAN-Router VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE S615 LAN-Router VendorSiemens Affected before V8.2.1 Fixed in V8.2.1 Patch available CNA
  • SCALANCE SC622-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA
  • SCALANCE SC626-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA
  • SCALANCE SC632-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA
  • SCALANCE SC636-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA
  • SCALANCE SC642-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA
  • SCALANCE SC646-2C VendorSiemens Affected before V3.2 Fixed in V3.2 Patch available CNA

Remediation

  • Fix · CNA RUGGEDCOM RM1224 LTE(4G) EU (Siemens) Fixed in V8.2.1
  • Fix · CNA RUGGEDCOM RM1224 LTE(4G) NAM (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M804PB (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M812-1 ADSL-Router family (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M816-1 ADSL-Router family (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M826-2 SHDSL-Router (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M874-2 (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M874-3 (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M874-3 3G-Router (CN) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M876-3 (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M876-3 (ROK) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M876-4 (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M876-4 (EU) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE M876-4 (NAM) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUB852-1 (A1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUB852-1 (B1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM853-1 (A1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM853-1 (B1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM853-1 (EU) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM856-1 (A1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM856-1 (B1) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM856-1 (CN) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM856-1 (EU) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE MUM856-1 (RoW) (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE S615 EEC LAN-Router (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE S615 LAN-Router (Siemens) Fixed in V8.2.1
  • Fix · CNA SCALANCE SC622-2C (Siemens) Fixed in V3.2
  • Fix · CNA SCALANCE SC626-2C (Siemens) Fixed in V3.2
  • Fix · CNA SCALANCE SC632-2C (Siemens) Fixed in V3.2
  • Fix · CNA SCALANCE SC636-2C (Siemens) Fixed in V3.2
  • Fix · CNA SCALANCE SC642-2C (Siemens) Fixed in V3.2
  • Fix · CNA SCALANCE SC646-2C (Siemens) Fixed in V3.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-23384
  2. 2026-10-03 Alias added: GHSA-9rhp-86gw-chqm

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences