PT-2024-7409 · Siemens · Scalance M812-1 Adsl-Router+13

Published 2024-08-13 · Updated 2024-08-23 · CVE-2024-41976

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE(4G) EU versions prior to V8.1 RUGGEDCOM RM1224 LTE(4G) NAM versions prior to V8.1 SCALANCE M804PB versions prior to V8.1 SCALANCE M812-1 ADSL-Router family versions prior to V8.1 SCALANCE M816-1 ADSL-Router family versions prior to V8.1 SCALANCE M826-2 SHDSL-Router versions prior to V8.1 SCALANCE M874-2 versions prior to V8.1 SCALANCE M874-3 versions prior to V8.1 SCALANCE M874-3 3G-Router (CN) versions prior to V8.1 SCALANCE M876-3 versions prior to V8.1 SCALANCE M876-3 (ROK) versions prior to V8.1 SCALANCE M876-4 versions prior to V8.1 SCALANCE M876-4 (EU) versions prior to V8.1 SCALANCE M876-4 (NAM) versions prior to V8.1 SCALANCE MUM853-1 (A1) versions prior to V8.1 SCALANCE MUM853-1 (B1) versions prior to V8.1 SCALANCE MUM853-1 (EU) versions prior to V8.1 SCALANCE MUM856-1 (A1) versions prior to V8.1 SCALANCE MUM856-1 (B1) versions prior to V8.1 SCALANCE MUM856-1 (CN) versions prior to V8.1 SCALANCE MUM856-1 (EU) versions prior to V8.1 SCALANCE MUM856-1 (RoW) versions prior to V8.1 SCALANCE S615 EEC LAN-Router versions prior to V8.1 SCALANCE S615 LAN-Router versions prior to V8.1

Description: The issue is related to improper input validation in specific VPN configuration fields, which could allow an authenticated remote attacker to execute arbitrary code on the device. This is a critical cybersecurity issue that affects various SCALANCE and RUGGEDCOM devices.

Recommendations: For all versions prior to V8.1, upgrade to version V8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the VPN configuration fields to minimize the risk of exploitation. Avoid using the vulnerable devices for critical operations until the issue is resolved. Note: The provided information does not include specific mitigation measures for each affected version, so a general recommendation to upgrade to a fixed version is provided.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-08783

CVE-2024-41976

Affected Products

Ruggedcom Rm1224 Lte(4G) Eu

Ruggedcom Rm1224 Lte(4G) Nam

Scalance M804Pb

Scalance M812-1 Adsl-Router

Scalance M816-1 Adsl-Router

Scalance M826-2 Shdsl-Router

Scalance M874-2

Scalance M874-3

Scalance M874-3 3G-Router

Scalance M876-3

Scalance M876-4

Scalance Mum853-1

Scalance Mum856-1

Scalance S615 Eec Lan-Router

References · 7

• https://bdu.fstec.ru/vul/2024-08783 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-087301.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41976 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41976 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1823269437501214789 · Twitter Post
• https://t.me/cvedetector/2968 · Telegram Post
• https://twitter.com/cracbot/status/1825050059295379512 · Twitter Post