Vulnerabilities

Search by TI id or any alias (CVE, GHSA), vendor, product or CWE.

Filters

Reset all

Threatist priority CRITICAL 0 HIGH 0 MEDIUM 2 LOW 0

Signals Exploited in the wild (KEV) 0 Patch available 2 No fix listed 0 Has CVE 2

Fix status Fixed 2 Partial 0 Will not fix 0 Deferred 0 No fix listed 0

Impact type Code execution 0 Privilege escalation 0 Security bypass 1 Information disclosure 0 Tampering 0 Denial of service 0 Spoofing 0 Cross-site scripting 0 SQL injection 0

Attack vector Network 2 Adjacent network 0 Local 0 Physical 0

Requirements No authentication 1 No user interaction 2

Product

Products as named in CPE, with their records.

Published Last 7 days Last 30 days Last 12 months Any time

Weakness (CWE) CWE-20 Improper Input Validation 1 CWE-862 Missing Authorization 1

1 selected

2 records

Sort

Release: Siemens RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM and 16 more products V7.1.2 × Clear all filters

TI-2022-13661 CVE-2022-31766 · GHSA-gh7w-58g5-rmwx

Improper input validation in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 46

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE M804PB (6GK5804-0AP00-2…

CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01243 · Published 2022-10-11 · Fixed in V7.1.2, V3.0.0 CWE-20

TI-2022-13660 CVE-2022-31765 · GHSA-33vv-h74c-xmw5

Missing authorization in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 42

Affected devices do not properly authorize the change password function of the web interface.

CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.011 · Published 2022-10-11 · Fixed in V7.1.2, V3.0 +4 CWE-862

THREATIST.IO

Vulnerability intelligence for security teams and AI agents.

Vulnerabilities Vendors Exploited (KEV) API & MCP Newsletter Privacy policy Terms of use

Newsletter Vulnerability intelligence in your inbox Subscribe

© 2026 Threatist.io · X (@threatist)Data: CVE Program, NVD, CISA KEV, FIRST EPSS, GitHub Advisory Database and Red Hat security data (both CC BY 4.0), Microsoft Security Response Center. This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

We would like to use Google Analytics cookies to see how the site is used. They are set only if you accept. Privacy policy