Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Siemens Component: 6ag1206-2bb00-7ac2 Firmware Clear all filters
TI-2023-23884 CVE-2023-44374 · GHSA-88q8-78jp-fcv6

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00666 Published 2023-11-14 Fixed in V8.0, V3.0.0 CWE-567
TI-2023-23883 CVE-2023-44373 · GHSA-86gv-6g4q-x856

Injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 43

Affected devices do not properly sanitize an input field.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01341 Published 2023-11-14 Fixed in V8.0, V6.6.0 +1 CWE-74
TI-2023-23839 CVE-2023-44322 · GHSA-mmpc-c8w6-wrm6

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority LOW 28

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00879 Published 2023-11-14 Fixed in V8.0, V3.0.0 CWE-252
TI-2023-23838 CVE-2023-44321 · GHSA-w4f6-7r85-9m86

Uncontrolled resource consumption in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 25

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.01001 Published 2023-11-14 Fixed in V8.1, V4.6 CWE-400
TI-2023-23837 CVE-2023-44320 · GHSA-282g-wxjw-75vj

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority LOW 27

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00643 Published 2023-11-14 Fixed in V7.2.2, V3.0.0 CWE-425
TI-2023-23836 CVE-2023-44319 · GHSA-mq9c-j62j-h6cj

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority LOW 31

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00446 Published 2023-11-14 Fixed in V8.0, V3.0.0 CWE-328
TI-2022-13660 CVE-2022-31765 · GHSA-33vv-h74c-xmw5

Missing authorization in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 42

Affected devices do not properly authorize the change password function of the web interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.011 Published 2022-10-11 Fixed in V7.1.2, V3.0 +4 CWE-862