Siemens SCALANCE and RUGGEDCOM
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41797US | — | — | ||
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 - CSAF Versionself
- SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 - HTML Versionself
- ICS Advisory ICSA-25-162-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-162-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (41)
- BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC316-8 (6GK5324-8TS00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 (6GK5328-4TS00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC332 (6GK5332-0GA00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC416-8 (6GK5424-8TR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC424-4 (6GK5428-4TR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC432 (6GK5432-0GR00-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan