{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2023-44320", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2023-09-28T16:18:45.648Z", "datePublished": "2023-11-14T11:03:59.528Z", "dateUpdated": "2024-08-13T07:52:19.094Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2024-08-13T07:52:19.094Z" }, "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). Affected devices do not properly validate the authentication when performing certain modifications in the web interface allowing an authenticated attacker to influence the user interface configured by an administrator." } ], "affected": [ { "vendor": "Siemens", "product": "RUGGEDCOM RM1224 LTE(4G) EU", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "RUGGEDCOM RM1224 LTE(4G) NAM", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M804PB", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M812-1 ADSL-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M812-1 ADSL-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M816-1 ADSL-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M816-1 ADSL-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M826-2 SHDSL-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M874-2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M874-3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M876-3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M876-3 (ROK)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M876-4", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M876-4 (EU)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE M876-4 (NAM)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE MUM853-1 (EU)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE MUM856-1 (EU)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE MUM856-1 (RoW)", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE S615 EEC LAN-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "SCALANCE S615 LAN-Router", "versions": [ { "status": "affected", "version": "0", "lessThan": "V7.2.2", "versionType": "custom" } ], "defaultStatus": "unknown" } ], "metrics": [ { "cvssV3_1": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "baseScore": 4.3, "baseSeverity": "MEDIUM" } } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-425", "description": "CWE-425: Direct Request ('Forced Browsing')", "type": "CWE" } ] } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf" }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-699386.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-180704.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-602936.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-068047.html" } ] }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:59:52.158Z" }, "title": "CVE Program Container", "references": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf", "tags": [ "x_transferred" ] }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf", "tags": [ "x_transferred" ] }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-699386.html", "tags": [ "x_transferred" ] }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-180704.html", "tags": [ "x_transferred" ] }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-602936.html", "tags": [ "x_transferred" ] } ] } ] } }