Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Siemens Component: Ruggedcom Rm1224 Lte(4g) Eu Firmware Clear all filters
TI-2024-34001 CVE-2024-50572 · GHSA-8fc3-6g2g-rgc3

Injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00672 Published 2024-11-12 Fixed in V8.2, V3.0.0 CWE-74
TI-2024-33990 CVE-2024-50561 · GHSA-fc63-6853-v5m2

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 23

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.003 Published 2024-11-12 Fixed in V8.2, V3.0.0 CWE-79
TI-2024-33989 CVE-2024-50560 · GHSA-545p-76g5-36m8

Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 12

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-11-12 Fixed in V8.2, V3.0.0 CWE-20
TI-2024-33988 CVE-2024-50559 · GHSA-q9qw-6hf7-48wg

Path traversal in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 23

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00289 Published 2024-11-12 Fixed in V8.2 CWE-22
TI-2024-33987 CVE-2024-50558 · GHSA-qpp3-qr6x-mfmj

Improper access control in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 24

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00317 Published 2024-11-12 Fixed in V8.2 CWE-284
TI-2024-33986 CVE-2024-50557 · GHSA-7679-9xw6-2858

Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 47

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00901 Published 2024-11-12 Fixed in V8.2 CWE-20
TI-2024-27998 CVE-2024-41978 · GHSA-9w3w-43cp-9hpg

Sensitive information in log files in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 32

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00488 Published 2024-08-13 Fixed in V8.1 CWE-532
TI-2024-27997 CVE-2024-41977 · GHSA-vxg9-7hhf-p3mh

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…

Priority LOW 34

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 7.3 Network Low privileges User interaction EPSS 0.00442 Published 2024-08-13 Fixed in V8.1 CWE-488
TI-2024-27996 CVE-2024-41976 · GHSA-q664-pc24-53jx

Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 41

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2)…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00768 Published 2024-08-13 Fixed in V8.1 CWE-20
TI-2024-02335 CVE-2024-2511 · GHSA-299c-jvhc-gxj8

Unbounded memory growth with session handling in TLSv1.3

Priority MEDIUM 61

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memo…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.59302 Published 2024-04-08 Partial fix · 3.2.2, 3.1.6 +2 CWE-1325