Siemens SCALANCE and RUGGEDCOM
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41797US | — | — | ||
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5… | ||||
references
External citations — patches, advisories, analysis.
- SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 - CSAF Versionself
- SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 - HTML Versionself
- ICS Advisory ICSA-25-162-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-162-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (41)
- FixedRUGGEDCOM RST2428P (6GK6242-6PA00)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC316-8 (6GK5324-8TS00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 (6GK5328-4TS00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC332 (6GK5332-0GA00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC416-8 (6GK5424-8TR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC424-4 (6GK5428-4TR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XC432 (6GK5432-0GR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCH328 (6GK5328-4TS01-2EC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM324 (6GK5324-8TS01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM328 (6GK5328-4TS01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XCM332 (6GK5332-0GA01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR302-32 (6GK5334-5TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR322-12 (6GK5334-3TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 (6GK5334-2TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR502-32 (6GK5534-5TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR522-12 (6GK5534-3TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XR526-8 (6GK5534-2TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - FixedSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan