PT-2023-6995 · Siemens · Scalance Mum856-1+16

Published 2023-11-14 · Updated 2024-09-10 · CVE-2023-44373

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions RUGGEDCOM RM1224 LTE(4G) EU versions < V8.0 RUGGEDCOM RM1224 LTE(4G) NAM versions < V8.0 SCALANCE M804PB versions < V8.0 SCALANCE M812-1 ADSL-Router versions < V8.0 SCALANCE M816-1 ADSL-Router versions < V8.0 SCALANCE M826-2 SHDSL-Router versions < V8.0 SCALANCE M874-2 versions < V8.0 SCALANCE M874-3 versions < V8.0 SCALANCE M876-3 versions < V8.0 SCALANCE M876-4 versions < V8.0 SCALANCE MUM853-1 (EU) versions < V8.0 SCALANCE MUM856-1 (EU) versions < V8.0 SCALANCE MUM856-1 (RoW) versions < V8.0 SCALANCE S615 EEC LAN-Router versions < V8.0 SCALANCE S615 LAN-Router versions < V8.0 SCALANCE WAB762-1 versions < V2.4.0 SCALANCE WAM763-1 versions < V2.4.0 SCALANCE WAM766-1 versions < V2.4.0 SCALANCE WUB762-1 versions < V2.4.0 SCALANCE WUM763-1 versions < V2.4.0 SCALANCE WUM766-1 versions < V2.4.0 SCALANCE XB205-3 (SC, PN) versions < V4.5 SCALANCE XB205-3 (ST, E/IP) versions < V4.5

Description A vulnerability has been identified in the affected devices, which do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. The vulnerability exists due to the lack of measures to neutralize special elements. Exploitation of the vulnerability may allow a remote attacker to disable user notifications.

Recommendations For RUGGEDCOM RM1224 LTE(4G) EU versions < V8.0, update to version V8.0 or later. For RUGGEDCOM RM1224 LTE(4G) NAM versions < V8.0, update to version V8.0 or later. For SCALANCE M804PB versions < V8.0, update to version V8.0 or later. For SCALANCE M812-1 ADSL-Router versions < V8.0, update to version V8.0 or later. For SCALANCE M816-1 ADSL-Router versions < V8.0, update to version V8.0 or later. For SCALANCE M826-2 SHDSL-Router versions < V8.0, update to version V8.0 or later. For SCALANCE M874-2 versions < V8.0, update to version V8.0 or later. For SCALANCE M874-3 versions < V8.0, update to version V8.0 or later. For SCALANCE M876-3 versions < V8.0, update to version V8.0 or later. For SCALANCE M876-4 versions < V8.0, update to version V8.0 or later. For SCALANCE MUM853-1 (EU) versions < V8.0, update to version V8.0 or later. For SCALANCE MUM856-1 (EU) versions < V8.0, update to version V8.0 or later. For SCALANCE MUM856-1 (RoW) versions < V8.0, update to version V8.0 or later. For SCALANCE S615 EEC LAN-Router versions < V8.0, update to version V8.0 or later. For SCALANCE S615 LAN-Router versions < V8.0, update to version V8.0 or later. For SCALANCE WAB762-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE WAM763-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE WAM766-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE WUB762-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE WUM763-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE WUM766-1 versions < V2.4.0, update to version V2.4.0 or later. For SCALANCE XB205-3 (SC, PN) versions < V4.5, update to version V4.5 or later. For SCALANCE XB205-3 (ST, E/IP) versions < V4.5, update to version V4.5 or later. As a temporary workaround, consider disabling the input field that is not properly sanitized until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the vulnerable input field in the affected API endpoints until the issue is resolved.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2023-08014

CVE-2023-44373

Affected Products

Ruggedcom Rm1224 Lte(4G) Eu

Ruggedcom Rm1224 Lte(4G) Nam

Scalance M804Pb

Scalance M812-1 Adsl-Router

Scalance M816-1 Adsl-Router

Scalance M826-2 Shdsl-Router

Scalance M874-2

Scalance M874-3

Scalance M876-3

Scalance M876-4

Scalance Mum853-1

Scalance Mum856-1

Scalance S615 Eec Lan-Router

Scalance Wab762-1

Scalance Wam763-1

Scalance Wam766-1

Scalance Xb205-3

References · 14

• https://osv.dev/vulnerability/CVE-2023-44373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44373 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08014 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-721642.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-019200.html · Note
• https://twitter.com/VulmonFeeds/status/1724428802158133386 · Twitter Post
• https://twitter.com/CVEnew/status/1724387629762797823 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-690517.html · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf · Note
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-320-08 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html · Note