PT-2024-7410 · Siemens · Scalance M812-1 Adsl-Router+13

Published 2024-08-13 · Updated 2024-08-23 · CVE-2024-41978

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE(4G) EU versions < V8.1 RUGGEDCOM RM1224 LTE(4G) NAM versions < V8.1 SCALANCE M804PB versions < V8.1 SCALANCE M812-1 ADSL-Router family versions < V8.1 SCALANCE M816-1 ADSL-Router family versions < V8.1 SCALANCE M826-2 SHDSL-Router versions < V8.1 SCALANCE M874-2 versions < V8.1 SCALANCE M874-3 versions < V8.1 SCALANCE M874-3 3G-Router (CN) versions < V8.1 SCALANCE M876-3 versions < V8.1 SCALANCE M876-3 (ROK) versions < V8.1 SCALANCE M876-4 versions < V8.1 SCALANCE M876-4 (EU) versions < V8.1 SCALANCE M876-4 (NAM) versions < V8.1 SCALANCE MUM853-1 (A1) versions < V8.1 SCALANCE MUM853-1 (B1) versions < V8.1 SCALANCE MUM853-1 (EU) versions < V8.1 SCALANCE MUM856-1 (A1) versions < V8.1 SCALANCE MUM856-1 (B1) versions < V8.1 SCALANCE MUM856-1 (CN) versions < V8.1 SCALANCE MUM856-1 (EU) versions < V8.1 SCALANCE MUM856-1 (RoW) versions < V8.1 SCALANCE S615 EEC LAN-Router versions < V8.1 SCALANCE S615 LAN-Router versions < V8.1

Description: A vulnerability has been identified in the affected devices, which insert sensitive information about the generation of 2FA tokens into log files. This could allow an authenticated remote attacker to forge 2FA tokens of other users. The issue is related to insufficient protection of registration data, which may allow an attacker to substitute 2FA tokens of other users and disclose protected information.

Recommendations: For all versions < V8.1, update to version V8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation. Avoid using sensitive information in log files until the issue is resolved. Restrict access to the affected devices to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2024-08784

CVE-2024-41978

Affected Products

Ruggedcom Rm1224 Lte(4G) Eu

Ruggedcom Rm1224 Lte(4G) Nam

Scalance M804Pb

Scalance M812-1 Adsl-Router

Scalance M816-1 Adsl-Router

Scalance M826-2 Shdsl-Router

Scalance M874-2

Scalance M874-3

Scalance M874-3 3G-Router

Scalance M876-3

Scalance M876-4

Scalance Mum853-1

Scalance Mum856-1

Scalance S615 Eec Lan-Router

References · 5

• https://cert-portal.siemens.com/productcert/html/ssa-087301.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08784 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41978 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41978 · Vendor Advisory
• https://t.me/cvedetector/2971 · Telegram Post