CVE-2024-41797
mediumPriorität · verfolgen · 0EPSS 0.004 · 32. PerzentilDEEUNLRUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) (All versions < V3.1), SCALANCE XC332 (6GK5332-0GA00-2AC2) (All versions < V3.1), SCALANCE XC416-8 (6GK5424-8TR00-2AC2) (All versions < V3.1), SCALANCE XC424-4 (6GK5428-4TR00-2AC2) (All versions < V3.1), SCALANCE XC432 (6GK5432-0GR00-2AC2) (All versions < V3.1), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.1), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.1), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.1), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-2AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-3AR3) (All versions < V3.1), SCALANCE XR302-32 (6GK5334-5TS00-4AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-2AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-3AR3) (All versions < V3.1), SCALANCE XR322-12 (6GK5334-3TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-2AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-3AR3) (All versions < V3.1), SCALANCE XR326-8 (6GK5334-2TS00-4AR3) (All versions < V3.1), SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-2AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-3AR3) (All versions < V3.1), SCALANCE XR502-32 (6GK5534-5TR00-4AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-2AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-3AR3) (All versions < V3.1), SCALANCE XR522-12 (6GK5534-3TR00-4AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-2AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-3AR3) (All versions < V3.1), SCALANCE XR526-8 (6GK5534-2TR00-4AR3) (All versions < V3.1), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.1), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.1). Affected devices contain an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to invoke an internal "do system" command which exceeds their privileges. This command allows the execution of certain low-risk actions, the most critical of which is clearing the local system log.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC316-8 (6GK5324-8TS00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 (6GK5328-4TS00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC332 (6GK5332-0GA00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC416-8 (6GK5424-8TR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC424-4 (6GK5428-4TR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC432 (6GK5432-0GR00-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)siemens_psirt
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC316-8 (6GK5324-8TS00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 (6GK5328-4TS00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC332 (6GK5332-0GA00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC416-8 (6GK5424-8TR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC424-4 (6GK5428-4TR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XC432 (6GK5432-0GR00-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCH328 (6GK5328-4TS01-2EC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM324 (6GK5324-8TS01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM328 (6GK5328-4TS01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XCM332 (6GK5332-0GA01-2AC2)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR302-32 (6GK5334-5TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR322-12 (6GK5334-3TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 (6GK5334-2TS00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR502-32 (6GK5534-5TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR522-12 (6GK5534-3TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XR526-8 (6GK5534-2TR00-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/ - BehobenSCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)cisa_csaf_ot
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977557/
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.3–5.3
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (292)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- NCSC-2025-0187Kwetsbaarheden verholpen in Siemens productenNL2025-06-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als RUGGEDCOM, SCALANCE, SIMATIC en Tecnomatix
- SSA-633269SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.12025-06-10csaf · siemens_psirtDE
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- ICSA-25-162-03Siemens SCALANCE and RUGGEDCOM2025-06-10icsa · cisa_csaf_otUS
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions for the affected products and recommends to update to the latest versions.
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (5)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2024-41797cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlcnnvd
- https://support.industry.siemens.com/cs/document/109977557/firmware-update-for-sinec-os-firmware-version-3-1?lc=en-wwPatchcnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlenisa_euvd
- https://cert-portal.siemens.com/productcert/html/ssa-633269.htmlnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan