PT-2024-8710 · Siemens · Ruggedcom Rm1224+11

Published 2024-11-12 · Updated 2024-11-13 · CVE-2024-50558

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions RUGGEDCOM RM1224 LTE(4G) EU versions < V8.2 RUGGEDCOM RM1224 LTE(4G) NAM versions < V8.2 SCALANCE M804PB versions < V8.2 SCALANCE M812-1 ADSL-Router versions < V8.2 SCALANCE M816-1 ADSL-Router versions < V8.2 SCALANCE M826-2 SHDSL-Router versions < V8.2 SCALANCE M874-2 versions < V8.2 SCALANCE M874-3 versions < V8.2 SCALANCE M874-3 3G-Router (CN) versions < V8.2 SCALANCE M876-3 versions < V8.2 SCALANCE M876-3 (ROK) versions < V8.2 SCALANCE M876-4 versions < V8.2 SCALANCE M876-4 (EU) versions < V8.2 SCALANCE M876-4 (NAM) versions < V8.2 SCALANCE MUM853-1 versions < V8.2 SCALANCE MUM856-1 versions < V8.2 SCALANCE S615 EEC LAN-Router versions < V8.2 SCALANCE S615 LAN-Router versions < V8.2

Description The affected devices improperly manage access control for read-only users. This could allow an attacker to cause a temporary denial of service condition. The vulnerability is related to incorrect access control in the SCALANCE M-800 family of industrial routers, including S615, MUM-800, and RM1224. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service.

Recommendations For all versions < V8.2, update to version V8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected devices until a patch is available. Restrict access to the devices to minimize the risk of exploitation. Avoid using the devices in sensitive environments until the issue is resolved. At the moment, there is no other information about additional mitigation measures.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-10312

CVE-2024-50558

Affected Products

Ruggedcom Rm1224

Scalance M804Pb

Scalance M812-1

Scalance M816-1

Scalance M826-2

Scalance M874-2

Scalance M874-3

Scalance M876-3

Scalance M876-4

Scalance Mum853-1

Scalance Mum856-1

Scalance S615

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-50558 · Security Note
• https://bdu.fstec.ru/vul/2024-10312 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50558 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-354112.html · Vendor Advisory
• https://t.me/cvedetector/10599 · Telegram Post
• https://feedly.com/cve/CVE-2024-50558 · Note
• https://security-database.com/detail.php?alert=CVE-2024-50558 · Note