CVE-2024-41978

mediumPriorität · verfolgen · 26EPSS 0.005 · 41. PerzentilDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (41st) EPSS

CVSS 6.5 · medium

Is it mine?

123 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-23

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.1), SCALANCE M812-1 ADSL-Router family (All versions < V8.1), SCALANCE M816-1 ADSL-Router family (All versions < V8.1), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.1), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.1), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.1), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.1), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.1), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.1), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.1), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.1), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.1), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.1), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.1), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.1), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.1), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.1), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.1), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.1), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.1), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.1). Affected devices insert sensitive information about the generation of 2FA tokens into log files. This could allow an authenticated remote attacker to forge 2FA tokens of other users.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M812-1 ADSL-Router familysiemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M816-1 ADSL-Router familysiemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-3 (6GK5876-3AA02-2BA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (6GK5876-4AA10-2BA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2)siemens_psirt
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M812-1 ADSL-Router familycisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M816-1 ADSL-Router familycisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-3 (6GK5876-3AA02-2BA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (6GK5876-4AA10-2BA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/
BehobenSCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2)cisa_csaf_ot
Update to V8.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109971718/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.9–7.1

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · productcert@siemens.com DEAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v4.04.9mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

v4.07.1highCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.07.1highCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-532USCWE-532USCWE-532USCWE-532USCWE-532US

betroffene Produkte (123)

Betroffene Produkte und Versionsbereiche.

RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)alle Versionencisa_csaf_otUS
RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)alle Versionencisa_csaf_otUS
SCALANCE M804PB (6GK5804-0AP00-2AA2)alle Versionencisa_csaf_otUS
SCALANCE M812-1 ADSL-Router familyalle Versionencisa_csaf_otUS
SCALANCE M816-1 ADSL-Router familyalle Versionencisa_csaf_otUS
SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)alle Versionencisa_csaf_otUS
SCALANCE M874-2 (6GK5874-2AA00-2AA2)alle Versionencisa_csaf_otUS
SCALANCE M874-3 (6GK5874-3AA00-2AA2)alle Versionencisa_csaf_otUS
SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2)alle Versionencisa_csaf_otUS
SCALANCE M876-3 (6GK5876-3AA02-2BA2)alle Versionencisa_csaf_otUS
SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)alle Versionencisa_csaf_otUS
SCALANCE M876-4 (6GK5876-4AA10-2BA2)alle Versionencisa_csaf_otUS
SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)alle Versionencisa_csaf_otUS
SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)alle Versionencisa_csaf_otUS
SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1)alle Versionencisa_csaf_otUS
SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1)alle Versionencisa_csaf_otUS
SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)alle Versionencisa_csaf_otUS
SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1)alle Versionencisa_csaf_otUS
SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1)alle Versionencisa_csaf_otUS
SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1)alle Versionencisa_csaf_otUS

20 von 123 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2024-0332Kwetsbaarheden verholpen in Siemens productenNL2024-08-13csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, INTRALOG, LOGO!, NX, SCALANCE, SINEC en Teamcenter.
SSA-087301SSA-087301: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.12024-08-13csaf · siemens_psirtDE
SCALANCE M-800 family before V8.1 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-24-228-01Siemens SCALANCE M-800, RUGGEDCOM RM12242024-08-13icsa · cisa_csaf_otUS
SCALANCE M-800 family before V8.1 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2024-08-13geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan